# About recent CVE Issue

**URL:** <https://community.jenkins.io/t/about-recent-cve-issue/22084>\
**Category:** Ask a question\
**Created:** [October 18, 2024, 11:17am UTC](https://community.jenkins.io/t/about-recent-cve-issue/22084 "2024-10-18T11:17:55Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![alebri78](https://avatars.discourse-cdn.com/v4/letter/a/eb9ed0/32.png) [@alebri78](https://community.jenkins.io/u/alebri78)\
**Post date:** [October 18, 2024, 11:17am UTC](https://community.jenkins.io/t/about-recent-cve-issue/22084/1 "2024-10-18T11:17:55Z")

</div>

hello all,  
about this:

> **[Jenkins Security Advisory 2024-01-24](https://www.jenkins.io/security/advisory/2024-01-24/)**
>
> Jenkins – an open source automation server which enables developers around the world to reliably build, test, and deploy their software

i have the 2.452.2 version and i don’t understand if my version is affected or not

thank all

---

<div class="post-metadata">

**Author:** ![MarkEWaite](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/markewaite/32/20_2.png) [@MarkEWaite](https://community.jenkins.io/u/MarkEWaite)\
**Post date:** [October 18, 2024, 11:37am UTC](https://community.jenkins.io/t/about-recent-cve-issue/22084/2 "2024-10-18T11:37:06Z")

</div>

Jenkins 2.452.2 already includes that fix. It is not affected by that advisory. The issue report says:

> Jenkins 2.442, LTS 2.426.3, and LTS 2.440.1 disables the command parser feature that replaces an `@` character followed by a file path in an argument with the file’s contents for CLI commands.

Jenkins 2.452.2 is affected by the critical advisory published 7 Aug 2024

> **[Jenkins Security Advisory 2024-08-07](https://www.jenkins.io/security/advisory/2024-08-07/)**
>
> Jenkins – an open source automation server which enables developers around the world to reliably build, test, and deploy their software

It is also affected by the advisory published 2 Oct 2024

> **[Jenkins Security Advisory 2024-10-02](https://www.jenkins.io/security/advisory/2024-10-02/)**
>
> Jenkins – an open source automation server which enables developers around the world to reliably build, test, and deploy their software

---

<div class="post-metadata">

**Author:** ![alebri78](https://avatars.discourse-cdn.com/v4/letter/a/eb9ed0/32.png) [@alebri78](https://community.jenkins.io/u/alebri78)\
**Post date:** [October 18, 2024, 12:51pm UTC](https://community.jenkins.io/t/about-recent-cve-issue/22084/3 "2024-10-18T12:51:08Z")

</div>

hi mark,  
thank you so much