Lucene search
GitHub Advisory DatabaseGHSA-H8P8-6378-649PHistoryJan 26, 2023 - 9:30 p.m.
XML external entity reference vulnerability on agents in Jenkins Semantic Versioning Plugin
2023-01-2621:30:18
CWE-611
GitHub Advisory Database
github.com
8
xml
entity vulnerability
jenkins
semantic versioning plugin
software
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
57.2%
Jenkins Semantic Versioning Plugin 1.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected configurations
Node
org.jenkinsci.plugins\Matchjdk_parameter_plugin
Related
prion
prion
Xxe
2023-01-26 21:18:00
nvd
nvd
CVE-2023-24430
2023-01-26 21:18:17
cve
cve
CVE-2023-24430
2023-01-26 21:18:17
osv
osv
XML external entity reference vulnerability on agents in Jenkins Semantic Versioning Plugin
2023-01-26 21:30:18
CVE-2023-24430
2023-01-26 21:18:17
cvelist
cvelist
CVE-2023-24430
2023-01-24 00:00:00
nessus
nessus
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
57.2%
Related for GHSA-H8P8-6378-649P