What is GHSA-8p3c-m625-wh83?

GHSA-8p3c-m625-wh83 is a security advisory published by GitHub Security Advisories with Medium severity. Jenkins has CRLF Injection Vulnerability in the CLI

Which CVE IDs does GHSA-8p3c-m625-wh83 cover?

GHSA-8p3c-m625-wh83 covers the following CVE IDs: CVE-2016-0789. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8p3c-m625-wh83?

GHSA-8p3c-m625-wh83 has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-8p3c-m625-wh83?

GHSA-8p3c-m625-wh83 affects 2 products, including: maven/org.jenkins-ci.main:jenkins-core:\u003e= 1.643, \u003c 1.650; maven/org.jenkins-ci.main:jenkins-core:\u003c 1.642.2.

GHSA-8p3c-m625-wh83MediumCVSS 6.1

Jenkins has CRLF Injection Vulnerability in the CLI

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

March 13, 2025

🔗 CVE IDs covered (1)

CVE-2016-0789 →

📋 Description

CRLF injection vulnerability in the CLI command documentation in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

🎯 Affected products2

maven/org.jenkins-ci.main:jenkins-core:>= 1.643, < 1.650
maven/org.jenkins-ci.main:jenkins-core:< 1.642.2

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2016-0789
https://access.redhat.com/errata/RHSA-2016:0711
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24
http://rhn.redhat.com/errata/RHSA-2016-1773.html
https://github.com/jenkinsci/jenkins/commit/f5c51fbad2b62b81dc1e0402aeee058a4a478046
https://github.com/advisories/GHSA-8p3c-m625-wh83