GHSA-P674-HH8X-RV5H XML external entity vulnerability in Jenkins Nuget Plugin

Jenkins Nuget Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This XML parser is used for the "Build on NuGet updates" feature. This allows attackers with the ability to control the contents of the packages.config file in a workspace to have...

PT-2021-14701 · Jenkins · Jenkins Nuget Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Nuget Plugin versions 1.0 and earlier Description: The issue concerns the XML parser in the Jenkins Nuget Plugin, which does not prevent XML external entity XXE attacks. This parser is used for the "Build on NuGet updates" feature,...

XXE vulnerability in nuget

nuget 1.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This XML parser is used for the "Build on NuGet updates" feature. This allows attackers with the ability to control the contents of the packages.config file in a workspace to have Jenkins parse a...