~ / search / GHSA-qg7x-4h4q-3m49

GHSA-qg7x-4h4q-3m49

XML external entity (XXE) vulnerability in Jenkins

Source: GitHub Advisory Database (reviewed) High CVE-2015-1811

Packages

EcosystemPackageAffectedFixed in
Maven org.jenkins-ci.main:jenkins-core >= 1.597, < 1.600 1.600
Maven org.jenkins-ci.main:jenkins-core < 1.596.1 1.596.1

Details

As written in the advisory (Markdown source, shown as plain text).

XML external entity (XXE) vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document.

References

External links from the advisory. They lead to third-party sites.