com.groupon.jenkins-ci.plugins:DotCi-Plugins-Starter-Pack (>=1.7.2 <=1.8.2), com.groupon.jenkins.plugins:DotCi-Plugins-Starter-Pack (>=1.0.0 <=1.7.1) +1 more potentially affected by CVE-2018-1000008 via org.jvnet.hudson.plugins:pmd (>=3.33 <=3.42)

org.jvnet.hudson.plugins:pmd MAVEN version =3.33, =1.7.2, =1.0.0, =1.7.1 - org.jenkins-ci.plugins:php =1.0 Source cves: CVE-2018-1000008 Source advisory: OSV:GHSA-687X-269M-7CV9...

CVE-2018-1000008

The CVE-2018-1000008 family is an XXE (XML External Entity) vulnerability in the Jenkins PMD Plugin, affecting version 3.49 and earlier. It processes XML during builds, allowing authenticated Jenkins users to extract secrets from the Jenkins master, perform server-side request forgery (SSRF), or ...