Not rated
CVE-2019-10327 An XML external entities (XXE) vulnerability in Jenkins Pipeline Maven Integration Plugin 1.7.0 and earlier allowed…
Description
An XML external entities (XXE) vulnerability in Jenkins Pipeline Maven Integration Plugin 1.7.0 and earlier allowed attackers able to control a temporary directory's content on the agent running the Maven build to have Jenkins parse a maliciously crafted XML file that uses external entities for extraction of secrets from the Jenkins master, server-side request forgery, or denial-of-service attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Pipeline Maven Integration Plugin | Versions not published |
References
- [oss-security] 20190531 Multiple vulnerabilities in Jenkins plugins www.openwall.com
- 108540 www.securityfocus.com
- jenkins.io jenkins.io
Timeline
- Published
- Last modified
Other CVEs of Jenkins Pipeline Maven Integration Plugin
The 6 CVEs of Jenkins Pipeline Maven Integration Plugin →
CVE-2023-41934
Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask (i.e., replace with…
Not rated
CVE-2020-2256
Jenkins Pipeline Maven Integration Plugin 3.9.2 and earlier does not escape the upstream job's display name shown as…
Not rated
CVE-2020-2235
A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier…
Not rated
CVE-2020-2233
A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read…
Not rated