Lucene search
HistoryMar 22, 2023 - 6:15 a.m.
CVE-2023-28685
jenkins
absint a³ plugin
xml parser
xxe attacks
cve-2023-28685
7.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
7.5 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
27.6%
Jenkins AbsInt a³ Plugin 1.1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected configurations
Node
jenkinsabsint_a3Range≤1.1.0jenkins
Related
cvelist
cvelist
CVE-2023-28685
2023-03-21 15:53:30
cve
cve
CVE-2023-28685
2023-03-22 06:15:11
osv
osv
Jenkins AbsInt a³ Plugin XML External Entity Reference vulnerability
2023-07-06 19:24:12
github
github
Jenkins AbsInt a³ Plugin XML External Entity Reference vulnerability
2023-07-06 19:24:12
prion
prion
Xxe
2023-03-22 06:15:00
7.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
7.5 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
27.6%
Related for NVD:CVE-2023-28685