Jenkins exploit that chains CVE-2018-1000861, CVE-2019-1003005 and CVE-2019-1003029 to a more reliable and elegant pre-auth remote code execution. Jenkins versions below 2.138 are affected.
88ba245224ecb5e377bcb871672d6537579b9aeac8cedbca083b7f571fa1faea