AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-27899

HIGH · CVSS 7 EPSS 0.23% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-03-10 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
arbitrary code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2023-27899
Severity
HIGH
CVSS
7
EPSS
0.23%
Jenkins

Original NVD Description

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the default permissions for newly created files when uploading a plugin for installation, potentially allowing attackers with access to the Jenkins controller file system to read and write the file before it is used, potentially resulting in arbitrary code execution.