{"cvss":0.0,"datePublished":"2018-07-07T00:00:00Z","dateUpdated":"2018-07-07T00:00:00Z","description":"Jenkins contains a remote code execution vulnerability. This vulnerability that could allowed attackers to transfer a serialized Java SignedObject object to the remoting-based Jenkins CLI, that would be deserialized using a new ObjectInputStream, bypassing the existing blocklist-based protection mechanism.","dueDate":"2025-10-23T00:00:00Z","id":"CVE-2017-1000353","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Jenkins","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Jenkins Remote Code Execution Vulnerability","vendor":"Jenkins"}