Sign in

9.8 Critical

CVE-2023-24430 Jenkins Semantic Versioning Plugin 1.14 and earlier does not configure its XML parser to prevent XML external entity…

Description

Jenkins Semantic Versioning Plugin 1.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Semantic Versioning Plugin 1.14	earliest → 1.14	No fix stated

The 3 CVEs of Jenkins Semantic Versioning Plugin →

CVE-2023-24429 Jenkins Semantic Versioning Plugin 1.14 and earlier does not restrict execution of an controller/agent message to… 9.8 Critical CVE-2022-27201 Jenkins Semantic Versioning Plugin 1.13 and earlier does not restrict execution of an controller/agent message to… Not rated

Do you use Jenkins Semantic Versioning Plugin?

Track this CVE Watch Jenkins Semantic Versioning Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2023-24430

Timeline

Published January 24, 2023
Last modified April 2, 2025

References

www.jenkins.io www.jenkins.io

Track this CVE