Exposing the Exploitation: How CVE-2024-23897 Led to the Compromise of Github Repos via Jenkins LFI Vulnerability

This report analyzes CVE-2024-23897, an unauthenticated Local File Inclusion vulnerability in Jenkins (affecting Jenkins 2.441 and earlier, LTS 2.426.2 and earlier) that IntelBroker exploited to read credentials.xml, decrypt stored GitHub SSH keys and tokens via the Jenkins Script Console, and exfiltrate private repositories; the document includes Docker reproduction steps, PoC usage, example commands, and mitigation recommendations such as timely patching, strong authentication, and least privilege.