CVE-2025-59476

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not restrict or transform the characters that can be inserted from user-specified content in log messages, allowing attackers able to control log message contents to insert line break characters, followed by forged log messages that may mislead administrators reviewing log output.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.jenkins.io/security/advisory/2025-09-17/#SECURITY-3424	Vendor Advisory
http://www.openwall.com/lists/oss-security/2025/09/17/1

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:jenkins:jenkins:::::lts:::*
	cpe:2.3:a:jenkins:jenkins:::::-:::*

History

17 Jun 2026, 09:46

Type	Values Removed	Values Added
Summary		(es) Jenkins 2.527 y anteriores, LTS 2.516.2 y anteriores no restringe ni transforma los caracteres que pueden insertarse desde contenido especificado por el usuario en mensajes de registro, permitiendo a los atacantes capaces de controlar el contenido de los mensajes de registro insertar caracteres de salto de línea, seguidos de mensajes de registro falsificados que pueden inducir a error a los administradores que revisan la salida del registro.

04 Nov 2025, 22:16

Type	Values Removed	Values Added
References		() http://www.openwall.com/lists/oss-security/2025/09/17/1 -

02 Oct 2025, 18:44

Type	Values Removed	Values Added
First Time		Jenkins jenkins Jenkins
References	~~() https://www.jenkins.io/security/advisory/2025-09-17/#SECURITY-3424 -~~	() https://www.jenkins.io/security/advisory/2025-09-17/#SECURITY-3424 - Vendor Advisory
CPE		cpe:2.3:a:jenkins:jenkins:::::-:::* cpe:2.3:a:jenkins:jenkins:::::lts:::*

25 Sep 2025, 19:15

Type	Values Removed	Values Added
CWE		CWE-117
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 5.3

17 Sep 2025, 14:18

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-09-17 14:15

Updated : 2026-06-17 09:46

NVD link : CVE-2025-59476

Mitre link : CVE-2025-59476

CVE.ORG link : CVE-2025-59476

JSON object : View

Products Affected

jenkins

jenkins

CWE

CWE-117

Improper Output Neutralization for Logs

{"id": "CVE-2025-59476", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-59476", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-25T18:37:10.453425Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "jenkinsci-cert@googlegroups.com", "affectedData": [{"vendor": "Jenkins Project", "product": "Jenkins", "versions": [{"status": "unaffected", "version": "2.516.3", "lessThan": "2.516.*", "versionType": "maven"}, {"status": "unaffected", "version": "2.528", "lessThan": "*", "versionType": "maven"}], "defaultStatus": "affected"}]}], "published": "2025-09-17T14:15:41.297", "references": [{"url": "https://www.jenkins.io/security/advisory/2025-09-17/#SECURITY-3424", "tags": ["Vendor Advisory"], "source": "jenkinsci-cert@googlegroups.com"}, {"url": "http://www.openwall.com/lists/oss-security/2025/09/17/1", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-117"}]}], "descriptions": [{"lang": "en", "value": "Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not restrict or transform the characters that can be inserted from user-specified content in log messages, allowing attackers able to control log message contents to insert line break characters, followed by forged log messages that may mislead administrators reviewing log output."}, {"lang": "es", "value": "Jenkins 2.527 y anteriores, LTS 2.516.2 y anteriores no restringe ni transforma los caracteres que pueden insertarse desde contenido especificado por el usuario en mensajes de registro, permitiendo a los atacantes capaces de controlar el contenido de los mensajes de registro insertar caracteres de salto de l\u00ednea, seguidos de mensajes de registro falsificados que pueden inducir a error a los administradores que revisan la salida del registro."}], "lastModified": "2026-06-17T09:46:15.280", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*", "vulnerable": true, "matchCriteriaId": "AD4E6E0A-5B01-4B41-ACAB-EEF706AE974C", "versionEndExcluding": "2.516.3"}, {"criteria": "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "C85AC4DD-437B-4143-8E3D-5E42B9EA8160", "versionEndExcluding": "2.528"}], "operator": "OR"}]}], "sourceIdentifier": "jenkinsci-cert@googlegroups.com"}