Skip to content
OpenAdvisories
High · 7.1 CVE-2022-28154 EUVD-2022-1384GHSA-8rx6-v5q4-xw3j

enkins Coverage/Complexity Scatter Plot Plugin XML External Entity Reference vulnerability

Published Mar 29, 2022 · Updated Aug 3, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Coverage/Complexity Scatter Plot Plugin Package: org.jenkins-ci.plugins:covcomplplot Category: Web / CMS Ecosystem: Maven

Description

Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Coverage/Complexity Scatter Plot Plugin unspecified – ≤ 1.1.1 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:covcomplplot <= 1.1.1 — GHSA-8rx6-v5q4-xw3j

References