rapid7/metasploit-framework

View on GitHub
modules/exploits/multi/http/jenkins_xstream_deserialize.rb

Summary

Maintainability
A
2 hrs
Test Coverage

Method initialize has 63 lines of code (exceeds 25 allowed). Consider refactoring.
Open

  def initialize(info = {})
    super(update_info(info,
      'Name'           => 'Jenkins XStream Groovy classpath Deserialization Vulnerability',
      'Description'    => %q{
        This module exploits CVE-2016-0792 a vulnerability in Jenkins versions older than 1.650 and Jenkins LTS versions
Severity: Major
Found in modules/exploits/multi/http/jenkins_xstream_deserialize.rb - About 2 hrs to fix

    There are no issues that match your filters.

    Category
    Status