Skip to content

Jenkins CVEs — PoCs and detection rules

3 Jenkins vulnerabilities with detection-only proof-of-concept code and Docker labs; 3 ship ready-to-deploy detection and prevention rules (Snort, YARA, Nginx, Apache). For authorized testing and blue-team detection engineering.

CVE Severity Detection / prevention PoC
CVE-2024-23897 — Jenkins CLI Arbitrary File Read Critical (9.8) Snort, YARA, Nginx, Apache ✅
CVE-2024-34144 — Jenkins Sandbox Bypass High (8.8) Snort, YARA, Nginx, Apache ✅
CVE-2024-43044 — Jenkins Remoting File Read High (8.8) Snort, YARA, Nginx, Apache ✅