Jenkins:
Exploitation
RCE via Groovy console, CVE-2024-23897 file read, credential theft
3 guides
•
Created Apr 4, 2026
•
Updated Sep 14, 2026
Jenkins Arbitrary File Read (CVE-2024-23897)
Exploits CVE-2024-23897 in Jenkins CLI to read arbitrary files via argument interpolation, enabling credential theft and potential RCE.
Jenkins Credential Extraction
Exploiting Jenkins to extract stored credentials via Groovy script console, API endpoints, or credential manager misconfigurations for lateral movement.
Jenkins Groovy Console RCE
Exploit Jenkins' Groovy Script Console to execute arbitrary system commands and achieve RCE on the host via unauthenticated or authenticated access.