Package · Maven

org.jenkins-ci.plugins:pom2config

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 6.5

CVE-2021-43576

XXE vulnerability in Jenkins pom2config Plugin

Jenkins pom2config Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing attackers with Overall/Read and Item/Read permissions to have Jenkins parse a crafted XML file that uses external entities for e…

Jenkins Project Jenkins pom2config Plugin org.jenkins-ci.plugins:pom2config Web / CMS Maven

Nov 12, 2021