Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users to cause a denial of service (improper plug-in and tool installation) via crafted update center data.
{
"cwe_ids": [
"CWE-20"
],
"github_reviewed": true,
"github_reviewed_at": "2025-03-13T19:13:02Z",
"nvd_published_at": "2015-10-16T20:59:00Z",
"severity": "LOW"
}