Skip to content
5.3 Medium

CVE-2023-27904 Jenkins 2.393 and earlier, LTS 2.375.3 and earlier prints an error stack trace on agent-related pages when agent…

Description

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier prints an error stack trace on agent-related pages when agent connections are broken, potentially revealing information about Jenkins configuration that is otherwise inaccessible to attackers.

Affected products and versions

Product Affected versions Fixed in
Jenkins 2.394 earliest → < 2.394 2.394
Jenkins 2.387 earliest → < 2.387.1 2.387.1
Jenkins 2.375 earliest → < 2.375.4 2.375.4
The 153 CVEs of Jenkins →
Track this CVE