CVE-2025-59476 – Jenkins Log Message Injection Vulnerability

CVE ID : CVE-2025-59476

Published : Sept. 17, 2025, 2:15 p.m. | 44 minutes ago

Description : Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not restrict or transform the characters that can be inserted from user-specified content in log messages, allowing attackers able to control log message contents to insert line break characters, followed by forged log messages that may mislead administrators reviewing log output.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…