Package · Maven

org.jenkins-ci.plugins:crap4j

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.5

CVE-2023-28680

Jenkins Crap4J Plugin vulnerable to XML external entity (XXE) attacks

Jenkins Crap4J Plugin 0.9 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Jenkins Project Jenkins Crap4J Plugin org.jenkins-ci.plugins:crap4j Web / CMS Maven

Mar 23, 2023