Lucene search

JenkinsCVELIST:CVE-2022-41226

HistorySep 21, 2022 - 3:45 p.m.

CVE-2022-41226

2022-09-2115:45:47

jenkins

www.cve.org

jenkins

compuware

xml parser

xxe

cve-2022-41226

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

58.3%

JSON

Jenkins Compuware Common Configuration Plugin 1.0.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

CNA Affected

[
  {
    "product": "Jenkins Compuware Common Configuration Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "lessThanOrEqual": "1.0.14",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2832