Lucene search
+L

1 matches found

OSV
OSV
added 2022/05/24 5:3 p.m.56 views

GHSA-7MF5-79GV-66GH Jenkins Maven Release Plug-in Plugin XXE vulnerability

Jenkins Maven Release Plug-in Plugin retrieves XML from Nexus repository manager APIs. Maven Release Plug-in Plugin 0.16.1 and earlier does not configure the XML parser to prevent XML external entity XXE attacks. While Jenkins users without Overall/Administer permission are not allowed to configu...

7.1CVSS8.2AI score0.00969EPSS
SaveExploits0References4
Rows per page
Query Builder