Skip to content
Sign in
Not rated

CVE-2022-28154 Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not configure its XML parser to prevent XML…

Description

Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products and versions

Product Affected versions Fixed in
Jenkins Coverage/Complexity Scatter Plot Plugin 1.1 earliest → 1.1.1 No fix stated

Other CVEs of Jenkins Coverage/Complexity Scatter Plot Plugin

The 2 CVEs of Jenkins Coverage/Complexity Scatter Plot Plugin →
CVE-2020-2265 Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not escape the method information in tooltips,… Not rated
Track this CVE