Not rated

CVE-2023-37942 Jenkins External Monitor Job Type Plugin 206.v9a_94ff0b_4a_10 and earlier does not configure its XML parser to prevent…

Description

Jenkins External Monitor Job Type Plugin 206.v9a_94ff0b_4a_10 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins External Monitor Job Type Plugin	Versions not published

The 2 CVEs of Jenkins External Monitor Job Type Plugin →

CVE-2022-36886 A cross-site request forgery (CSRF) vulnerability in Jenkins External Monitor Job Type Plugin 191.v363d0d1efdf8 and… Not rated

Do you use Jenkins External Monitor Job Type Plugin?

Track this CVE Watch Jenkins External Monitor Job Type Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2023-37942

Timeline

Published July 12, 2023
Last modified November 7, 2024

References

Jenkins Security Advisory 2023-07-12 www.jenkins.io
www.openwall.com www.openwall.com

Track this CVE

CVE-2023-37942 Jenkins External Monitor Job Type Plugin 206.v9a_94ff0b_4a_10 and earlier does not configure its XML parser to prevent…

Description

Affected products and versions

Other CVEs of Jenkins External Monitor Job Type Plugin