Jenkins

A critical command injection vulnerability (CVE-2025-53652) in the Jenkins Git Parameter plugin has been exposed by VulnCheck. Initially rated as medium, the flaw allows remote code execution (RCE), enabling hackers to take control of unauthenticated Jenkins servers. Around 15,000 servers are at risk due to disabled security settings. The vulnerability permits attackers to inject malicious commands, potentially accessing sensitive data like master keys. Despite a patch being released, administrators can manually disable it, leaving systems exposed. VulnCheck warns that while widespread exploitation is unlikely, skilled attackers may use it for targeted attacks or deeper network infiltration.

Source: https://hackread.com/jenkins-servers-risk-rce-vulnerability-cve-2025-53652/

TPRM report: https://www.rankiteo.com/company/jenkinsio

"id": "jen537081025",
"linkid": "jenkinsio",
"type": "Vulnerability",
"date": "8/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Software Development',
                        'name': 'Jenkins',
                        'type': 'Organization'}],
 'attack_vector': 'Remote Code Execution (RCE)',
 'description': 'A new report by VulnCheck exposes a critical command '
                'injection flaw (CVE-2025-53652) in the Jenkins Git Parameter '
                'plugin. This vulnerability, initially rated as medium, could '
                'allow hackers to achieve remote code execution and compromise '
                'thousands of unauthenticated Jenkins servers.',
 'impact': {'systems_affected': '15,000 unauthenticated Jenkins servers'},
 'post_incident_analysis': {'corrective_actions': 'Official fix released, '
                                                  'special rule created to '
                                                  'detect exploitation '
                                                  'attempts',
                            'root_causes': 'Improper handling of user input in '
                                           'the Git Parameter plugin'},
 'references': [{'source': 'VulnCheck'}, {'source': 'Hackread.com'}],
 'response': {'remediation_measures': 'Official fix released, special rule '
                                      'created to detect exploitation '
                                      'attempts'},
 'title': 'Critical Command Injection Flaw in Jenkins Git Parameter Plugin '
          '(CVE-2025-53652)',
 'type': 'Command Injection',
 'vulnerability_exploited': 'CVE-2025-53652'}