CVE-2018-1999044: Jenkins

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request handling thread enter an infinite loop.

Affected products

• Jenkins Jenkins: up to and including 2.121.2; up to and including 2.137

Published 2018-08-23. Last modified 2026-06-17.