CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2023/04/02 9:15 p.m.•5 views

CVE-2023-28681

Jenkins Visual Studio Code Metrics Plugin 1.7 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.2CVSS7.3AI score0.00569EPSS

Exploits0References1

Cvelist•added 2023/03/23 11:26 a.m.•17 views

CVE-2023-28681

Jenkins Visual Studio Code Metrics Plugin 1.7 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.5AI score0.00569EPSS

Exploits0References1

CVE•added 2023/03/23 11:26 a.m.•253 views

CVE-2023-28681

CVE-2023-28681 affects Jenkins Visual Studio Code Metrics Plugin 1.7 and earlier. The vulnerability arises because the plugin’s XML parser is not configured to prevent XML external entity (XXE) attacks, which can allow an attacker to cause the Jenkins controller/server-side processing to reveal s...

8.2CVSS8.2AI score0.00569EPSS

Exploits0References1Affected Software1