CVE-2022-43415 Jenkins REPO Plugin 1.15.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks

Description

Jenkins REPO Plugin 1.15.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Jenkins REPO Plugin 1.15	premières → 1.15.0	Pas de correctif indiqué

Autres CVE de Jenkins REPO Plugin

Les 2 CVE de Jenkins REPO Plugin →

CVE-2022-30949 Jenkins REPO Plugin 1.14.0 and earlier allows attackers able to configure pipelines to check out some SCM repositories… Non notée