Package · Maven

com.thalesgroup.hudson.plugins:sourcemonitor

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Critical 9.8

CVE-2022-45396

XXE vulnerability on agents in Jenkins SourceMonitor Plugin

Jenkins SourceMonitor Plugin 0.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Jenkins Project Jenkins SourceMonitor Plugin com.thalesgroup.hudson.plugins:sourcemonitor Web / CMS Maven

Nov 15, 2022