Jenkins RCE Attack
ID: dee05e33-4030-5064-9a82-ff00cb1bc499
STIX ID: report--dee05e33-4030-5064-9a82-ff00cb1bc499
Feed Name: FortiGuard Labs | FortiGuard Center - Outbreak Alerts
Threat Score
FortiGuard Labs reports that CVE-2024-23897, an args4j-related arbitrary file read in Jenkins that can lead to RCE, is being actively exploited in ransomware campaigns; a public PoC and dark‑web chatter have been observed, and Fortinet indicates IPS protections have blocked known hashes/IOCs while recommending immediate Jenkins updates and patching.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.