GHSA-8qpf-fv36-h4r8MediumCVSS 6.5

Infinite Loop in Jenkins Core

Published
May 13, 2022
Last Modified
December 15, 2023

🔗 CVE IDs covered (1)

📋 Description

A Cron expression form validation could enter infinite loop, potentially resulting in denial of service. The form validation for cron expressions (e.g. "Poll SCM", "Build periodically") could enter infinite loops when cron expressions only matching certain rare dates were entered, blocking request handling threads indefinitely.

🎯 Affected products1

  • maven/org.jenkins-ci.main:jenkins-core:< 2.138

🔗 References (4)