Skip to content
Sign in
Not rated

CVE-2019-10466 An XML external entities (XXE) vulnerability in Jenkins 360 FireLine Plugin allows attackers with Overall/Read access to…

Description

An XML external entities (XXE) vulnerability in Jenkins 360 FireLine Plugin allows attackers with Overall/Read access to have Jenkins resolve external entities, resulting in the extraction of secrets from the Jenkins agent, server-side request forgery, or denial-of-service attacks.

Affected products and versions

Product Affected versions Fixed in
Jenkins 360 FireLine Plugin Versions not published

Other CVEs of Jenkins 360 FireLine Plugin

The 2 CVEs of Jenkins 360 FireLine Plugin →
CVE-2022-43435 Jenkins 360 FireLine Plugin 1.7.2 and earlier programmatically disables Content-Security-Policy protection for… 5.3 Medium
Track this CVE