Lucene search

K
cvelistMitreCVELIST:CVE-2018-1000198
HistoryOct 03, 2022 - 4:21 p.m.

CVE-2018-1000198

2022-10-0316:21:59
mitre
www.cve.org
jenkins black duck hub
cve-2018-1000198
xml external entity
vulnerability
jenkins
postbuildscandescriptor

0.001 Low

EPSS

Percentile

28.6%

A XML external entity processing vulnerability exists in Jenkins Black Duck Hub Plugin 3.1.0 and older in PostBuildScanDescriptor.java that allows attackers with Overall/Read permission to make Jenkins process XML eternal entities in an XML document.

0.001 Low

EPSS

Percentile

28.6%

Related for CVELIST:CVE-2018-1000198