5 matches found
EUVD-2022-7223
Malicious code in bioql PyPI...
5.5CVSS5.6AI score0.0027EPSS
SaveExploits0References4
CVE-2022-45386
Jenkins Violations Plugin 0.7.11 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
5.5CVSS6.7AI score0.0027EPSS
SaveExploits0References1
CVE-2022-45386
Jenkins Violations Plugin 0.7.11 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
6.1AI score0.0027EPSS
SaveExploits0References2
PT-2022-27488 · Jenkins · Jenkins Violations Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Violations Plugin versions 0.7.11 and earlier Description: The issue arises from the Jenkins Violations Plugin not configuring its XML parser to prevent XML external entity XXE attacks. This allows attackers to control XML input files...
5.5CVSS5.4AI score0.0027EPSS
SaveExploits0References6
20