Lucene search
+L

1 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/11/16 12:0 a.m.29 views

Jenkins pom2config XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Jenkins pom2config. Authentication is required to exploit this vulnerability. The specific flaw exists within the Pom2Config class. Due to the improper restriction of XML External Entity XXE...

6.5CVSS5.9AI score0.02366EPSS
SaveExploits0References1
Rows per page
Query Builder