Package · Maven

org.jenkins-ci.plugins:plot

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Critical 9.8

CVE-2022-46682

Jenkins Plot Plugin XML External Entity Reference vulnerability

Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Jenkins Project Jenkins Plot Plugin org.jenkins-ci.plugins:plot Web / CMS Maven

Dec 7, 2022
High 8.0

CVE-2022-34783 EPSS 82%

Cross-site Scripting in Jenkins Plot Plugin

Jenkins Plot Plugin 2.1.10 and earlier does not escape plot descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Jenkins Project Jenkins Plot Plugin org.jenkins-ci.plugins:plot Web / CMS Maven

Jun 30, 2022