Lucene search
+L

7 matches found

attackerkb
attackerkb
•added 2022/03/29 1:15 p.m.•7 views

CVE-2022-28154

Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.1CVSS5.9AI score0.01012EPSS
SaveExploits0References3
NVD
NVD
•added 2022/03/29 1:15 p.m.•35 views

CVE-2022-28154

Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.1CVSS0.01012EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/29 12:00 a.m.•7 views

CVE-2022-28154: Improper Restriction of XML External Entity Reference

Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.1CVSS7.6AI score0.01012EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/03/29 12:00 a.m.•14 views

Jenkins Coverage/Complexity Scatter Plot Plugin 代码问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.An XML external entity injection...

8.1CVSS5.8AI score0.01012EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/03/29 12:00 a.m.•12 views

PT-2022-18853 · Jenkins · Jenkins Coverage/Complexity Scatter Plot Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Coverage/Complexity Scatter Plot Plugin versions 1.1.1 and earlier Description: The issue allows attackers to control input files for the 'Public Coverage / Complexity Scatter Plot' post-build step, enabling them to have Jenkins parse...

8.1CVSS8AI score0.01012EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/16 12:00 a.m.•5 views

CVE-2020-2265: Improper Neutralization of Input During Web Page Generation

Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not escape the method information in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to provide report files to the plugin's post-build step...

5.4CVSS5.7AI score0.00735EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/09/16 12:00 a.m.•12 views

PT-2020-15490 · Jenkins · Jenkins Coverage/Complexity Scatter Plot Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Coverage/Complexity Scatter Plot Plugin versions 1.1.1 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability. This occurs because the plugin does not escape the method information in tooltips,...

5.4CVSS5.2AI score0.00735EPSS
SaveExploits0References6
Rows per page
Query Builder