4 matches found
CVE-2023-28682
Jenkins Performance Publisher Plugin 8.09 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
8.2CVSS7.3AI score0.00569EPSS
SaveExploits0References1
CVE-2023-28682
Jenkins Performance Publisher Plugin 8.09 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
8.2AI score0.00569EPSS
SaveExploits0References1
CVE-2023-28682
CVE-2023-28682 affects Jenkins Performance Publisher Plugin 8.09 and earlier. The root cause is that the plugin’s XML parser is not configured to prevent XML external entity (XXE) attacks, allowing crafted PerfPublisher report files to be parsed in a way that can disclose secrets from the Jenkins...
8.2CVSS8AI score0.00569EPSS
SaveExploits0References1Affected Software1
20