almos-kit (1.0.0), alphamed-federated (>=0.1.2, <=0.3.8) +7 more potentially affected by CVE-2023-24816 via ipython (7.29.0)

ipython PYPI version 7.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - almos-kit 1.0.0 - alphamed-federated =0.1.2, =0.1.2, =0.0.1, =7.0.0, =4.0.0, =1.0.0, =0.0.0, =2.1.0, =2.2.0 Source cves: CVE-2023-24816 Source...

Jenkins Plot Plugin XML External Entity Reference vulnerability

Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to control XML input files for the 'Plot build data' build step to have Jenkins parse a crafted file that uses external entities for extraction of secret...

GHSA-WGPP-G6V9-7HXP Jenkins Plot Plugin XML External Entity Reference vulnerability

Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to control XML input files for the 'Plot build data' build step to have Jenkins parse a crafted file that uses external entities for extraction of secret...

org.jenkins-ci.plugins:silk-performer-plugin (>=2.0.0-beta, <=2.0.1-beta) potentially affected by CVE-2022-46682 via org.jenkins-ci.plugins:plot (2.1.0)

org.jenkins-ci.plugins:plot MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:plot and may be impacted: - org.jenkins-ci.plugins:silk-performer-plugin =2.0.0-beta, =2.0.1-beta Source cves: CVE-2022-46682 Source...

org.jenkins-ci.plugins:silk-performer-plugin (>=2.0.0-beta, <=2.0.1-beta) potentially affected by CVE-2022-46682 via org.jenkins-ci.plugins:plot (2.1.0)

org.jenkins-ci.plugins:plot MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:plot and may be impacted: - org.jenkins-ci.plugins:silk-performer-plugin =2.0.0-beta, =2.0.1-beta Source cves: CVE-2022-46682 Source...

CVE-2022-46682

Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2022-46682

Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

Xxe

Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

Jenkins Plot Plugin code-related vulnerabilities

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A code issue vulnerability...

PT-2022-27946 · Jenkins · Jenkins Plot Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Plot Plugin versions 2.1.11 and earlier Description: The issue allows attackers who can control XML input files for the 'Plot build data' build step to have Jenkins parse a crafted file that uses external entities for extraction of...

CVE-2022-46682

Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2022-46682: Improper Restriction of XML External Entity Reference

Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

org.jenkins-ci.plugins:php (1.0), org.jenkins-ci.plugins:silk-performer-plugin (>=2.0.0-beta, <=2.0.1-beta) potentially affected by CVE-2022-46682 via org.jenkins-ci.plugins:plot (>=1.5, <=2.1.0)

org.jenkins-ci.plugins:plot MAVEN version =1.5, =2.0.0-beta, =2.0.1-beta Source cves: CVE-2022-46682 Source advisory: MEND:CVE-2022-46682...

CVE-2022-46682

Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2022-46682

Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2022-46682

CVE-2022-46682 affects Jenkins Plot Plugin 2.1.11 and earlier. The root cause is that the plugin’s XML parser did not disable external entity resolution, enabling XXE attacks. Impact is high (CVE metrics show critical severity with potential confidentiality, integrity, and availability impacts). ...

XXE vulnerability in plot

plot 2.1.11 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to control XML input files for the 'Plot build data' build step to have Jenkins parse a crafted file that uses external entities for extraction of secrets from the...

The January 6 Insurrection Hearings Are Just Heating Up

The US House committee has already uncovered a more organized and sinister plot than many imagined. But history suggests the worst may be yet to come...

GHSA-HPF7-MMQW-G6VQ Cross-site Scripting in Jenkins Plot Plugin

Jenkins Plot Plugin 2.1.10 and earlier does not escape plot descriptions, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Cross-site Scripting in Jenkins Plot Plugin

Jenkins Plot Plugin 2.1.10 and earlier does not escape plot descriptions, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...