XStream: Java Crash Vulnerability in Jenkins Versions 2.56 and Earlier

XStream: Java Crash Vulnerability in Jenkins Versions 2.56 and Earlier

CVE-2017-1000355 · MEDIUM Severity

AV:N/AC:L/AU:S/C:N/I:N/A:P

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an XStream: Java crash when trying to instantiate void/Void.

Learn more about our Web Application Penetration Testing UK.