Skip to content
OpenAdvisories
High · 8.1 CVE-2022-28140 EUVD-2022-1542GHSA-v4rr-65x6-g69f

XXE vulnerability in Jenkins Flaky Test Handler Plugin

Published Mar 29, 2022 · Updated Aug 3, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Flaky Test Handler Plugin Package: org.jenkins-ci.plugins:flaky-test-handler Category: Web / CMS Ecosystem: Maven

Description

Jenkins Flaky Test Handler Plugin 1.2.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Flaky Test Handler Plugin unspecified – ≤ 1.2.1 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:flaky-test-handler < 1.2.2 1.2.2 GHSA-v4rr-65x6-g69f

References