CVE-2022-43415

Jenkins REPO Plugin 1.15.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2022-43415

Jenkins REPO Plugin 1.15.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2022-43415

Jenkins REPO Plugin 1.15.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2022-43415

CVE-2022-43415 affects Jenkins REPO Plugin 1.15.0 and earlier. The underlying issue is that the plugin’s XML parser does not disable XML external entity (XXE) processing, enabling an attacker who can influence the repo binary on agents to cause the Jenkins controller to parse crafted XML and pote...