Product · Jenkins Project

Jenkins Token Macro Plugin

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.5

CVE-2019-10337

Improper Restriction of XML External Entity Reference Jenkins Token Macro Plugin

An XML external entities (XXE) vulnerability in Jenkins Token Macro Plugin 2.7 and earlier allowed attackers able to control a the content of the input file for the "XML" macro to have Jenkins resolve external entities, resulting in the extraction of secrets …

Jenkins Project Jenkins Token Macro Plugin org.jenkins-ci.plugins:token-macro Web / CMS Maven

Jun 11, 2019