{"id":892,"date":"2024-01-29T15:15:35","date_gmt":"2024-01-29T15:15:35","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/jenkins-kriticne-ranjivosti\/"},"modified":"2026-11-04T08:55:08","modified_gmt":"2026-11-04T08:55:08","slug":"jenkins-kriticne-ranjivosti","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/ranjivosti\/jenkins-kriticne-ranjivosti\/","title":{"rendered":"Jenkins kriti\u010dne ranjivosti"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Javno su postale dostupne upute za iskori\u0161tavanje ranjivosti Jenkinsa \u2013 open source poslu\u017eitelja za automatizaciju razvoja softvera.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>U Jenkinsu su otkrivene dvije ranjivosti: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><a href=\"https:\/\/cve.cert.hr\/cve\/CVE-2024-23897\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2024-23897<\/a> - napada\u010du omogu\u0107uje pristup i \u010ditanje proizvoljnih datoteka.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ova ranjivost proizlazi iz <a href=\"https:\/\/args4j.kohsuke.org\/\" target=\"_blank\" rel=\"noreferrer noopener\">args4j<\/a> parsera koji automatski pro\u0161iri sadr\u017eaj datoteke ako argument naredbene linije po\u010dinje znakom \u201e@\u201c.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><a href=\"https:\/\/cve.cert.hr\/cve\/CVE-2024-23898\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2024-23898<\/a> \u2013 omogu\u0107uje izvr\u0161avanje naredbe u Command Lineu navo\u0111enjem \u017ertve da klikne zlonamjernu poveznicu.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Preuzmite zakrpe za navedene ranjivosti. Izdani su i <a href=\"https:\/\/www.jenkins.io\/security\/advisory\/2024-01-24\/\" target=\"_blank\" rel=\"noreferrer noopener\">savjeti<\/a> u kojima su opisani razli\u010diti scenariji napada. Ako iz nekog razloga ne mo\u017eete preuzeti zakrpe, opisani su i koraci za mitigaciju ranjivosti.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Izvor: <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/exploits-released-for-critical-jenkins-rce-flaw-patch-now\/\" target=\"_blank\" rel=\"noreferrer noopener\">bleepingcomputer.com<\/a><\/em><\/p>","protected":false},"excerpt":{"rendered":"<p>Javno su postale dostupne upute za iskori\u0161tavanje ranjivosti Jenkinsa \u2013 open source poslu\u017eitelja za automatizaciju razvoja softvera. U Jenkinsu su otkrivene dvije ranjivosti: CVE-2024-23897 &#8211; napada\u010du omogu\u0107uje pristup i \u010ditanje proizvoljnih datoteka. Ova ranjivost proizlazi iz args4j parsera koji automatski pro\u0161iri sadr\u017eaj datoteke ako argument naredbene linije po\u010dinje znakom \u201e@\u201c. CVE-2024-23898 \u2013 omogu\u0107uje izvr\u0161avanje naredbe [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1422,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[27],"tags":[],"tema":[],"class_list":["post-892","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ranjivosti"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/892","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=892"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/892\/revisions"}],"predecessor-version":[{"id":1426,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/892\/revisions\/1426"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1422"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=892"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=892"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=892"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=892"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=892"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}