3 matches found
CVE-2023-24429: Improper Restriction of XML External Entity Reference
Jenkins Semantic Versioning Plugin 1.14 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing attackers able to control agent processes to have Jenkins parse a crafted file that uses externa...
9.8CVSS5.8AI score0.01314EPSS
SaveExploits0References3
20