5 matches found
CVE-2022-45396
Jenkins SourceMonitor Plugin 0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
9.8CVSS5.8AI score0.00961EPSS
SaveExploits0References2
CVE-2022-45396
Jenkins SourceMonitor Plugin 0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
9.8CVSS0.00961EPSS
SaveExploits0References2
CVE-2022-45396
Jenkins SourceMonitor Plugin 0.2 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
7AI score0.00961EPSS
SaveExploits0References2
CVE-2022-45396
The CVE-2022-45396 entry refers to Jenkins SourceMonitor Plugin 0.2 and earlier, which does not configure its XML parser to prevent XML external entity (XXE) attacks. The vulnerability affects the plugin during the Publish SourceMonitor results step by parsing XML input files, enabling potential ...
9.8CVSS9.4AI score0.00961EPSS
SaveExploits0References2Affected Software1
20