GHSA-qj27-w92h-fc9r

ghsaUSosv

XML external entity (XXE) vulnerability in Jenkins

view advisory published 2022-05-24Licence: CC-BY-4.0

XML external entity (XXE) vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2015-1809US	high7.5	1.41% (73rd)	—	2020-01-15
XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query.

references

External citations — patches, advisories, analysis.

https://bugzilla.redhat.com/show_bug.cgi?id=1205625WEB
https://jenkins.io/security/advisory/2015-02-27WEB
https://nvd.nist.gov/vuln/detail/CVE-2015-1809ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan