CVE-2018-1000010

CVE-2018-1000010 affects Jenkins DRY Plugin 2.49 and earlier, where parsing of XML files during builds enables XML External Entity (XXE) processing. The root cause is XXE handling in the plugin, allowing attackers with Jenkins user permissions to extract secrets from the Jenkins master, perform s...

CVE-2017-1000103

The CVE-2017-1000103 issue affects the CloudBees Static Analysis Utilities and DRY Plugin (Jenkins) where the Details view is vulnerable to persisted cross-site scripting. Malicious input could lead to insertion of arbitrary HTML into the view. The provided connected documents confirm the vulnera...