CVE-2022-34793 Jenkins Recipe Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks

Description

Jenkins Recipe Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Recipe Plugin 1.2	earliest → 1.2	No fix stated

Other CVEs of Jenkins Recipe Plugin

The 3 CVEs of Jenkins Recipe Plugin →

CVE-2022-34794 Missing permission checks in Jenkins Recipe Plugin 1.2 and earlier allow attackers with Overall/Read permission to… Not rated CVE-2022-34792 A cross-site request forgery (CSRF) vulnerability in Jenkins Recipe Plugin 1.2 and earlier allows attackers to send an… Not rated