Lucene search
HistorySep 21, 2022 - 4:15 p.m.
CVE-2022-41241
jenkins rqm plugin
xml parser
vulnerability
cve-2022-41241
xxe attacks
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
0.002 Low
EPSS
Percentile
51.7%
Jenkins RQM Plugin 2.8 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected configurations
Node
jenkinsrqmRange≤2.8jenkins
Related
cvelist
cvelist
CVE-2022-41241
2022-09-21 15:46:00
cve
cve
CVE-2022-41241
2022-09-21 16:15:10
osv
osv
prion
prion
Xxe
2022-09-21 16:15:00
github
github
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2022-09-21)
2022-10-07 00:00:00
Jenkins weekly < 2.370 Multiple Vulnerabilities
2022-10-07 00:00:00
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
0.002 Low
EPSS
Percentile
51.7%
Related for NVD:CVE-2022-41241