9.8
Critical
CVE-2022-45396 Jenkins SourceMonitor Plugin 0.2 and earlier does not configure its XML parser to prevent XML external entity (XXE)…
Description
Jenkins SourceMonitor Plugin 0.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins SourceMonitor Plugin 0.2 | earliest → 0.2 | No fix stated |