1 matches found
XXE vulnerability in ivytrigger
ivytrigger 1.01 and earlier bundles versions of Apache Ivy vulnerable to CVE-2022-46751. This allows attackers able to control the input files for the "IvyTrigger - Poll with an Ivy script" build trigger to have Jenkins parse a crafted XML document that uses external entities for extraction of...
8.2CVSS7.5AI score0.01999EPSS
SaveExploits0Affected Software1
20