CVE coverage
View on NVD →
CVE-2018-1000861
CVSS 9.8
Actively exploited (KEV)
4 detections found
A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this way.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| suricata | ET WEB_SPECIFIC_APPS Jenkins Chained Exploits CVE-2018-1000861 and CVE-2019-1003000 M2 | rev 5 | 2024-05-01 |
| suricata | ET WEB_SPECIFIC_APPS Jenkins Chained Exploits CVE-2018-1000861 and CVE-2019-1003000 M1 | rev 7 | 2024-05-01 |
| snort | ET WEB_SPECIFIC_APPS Jenkins Chained Exploits CVE-2018-1000861 and CVE-2019-1003000 M1 | rev 3 | 2019-08-19 |
| snort | ET WEB_SPECIFIC_APPS Jenkins Chained Exploits CVE-2018-1000861 and CVE-2019-1003000 M2 | rev 2 | 2019-05-10 |