Skip to content
OpenAdvisories
High · 7.1 CVE-2022-30971 EUVD-2022-5622GHSA-wqmp-2p5r-rhfv

XML External Entity Reference in Jenkins Storable Configs Plugin

Published May 17, 2022 · Updated Aug 3, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Storable Configs Plugin Package: org.jvnet.hudson.plugins:storable-configs-plugin Category: Web / CMS Ecosystem: Maven

Description

Jenkins Storable Configs Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Storable Configs Plugin unspecified – ≤ 1.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jvnet.hudson.plugins:storable-configs-plugin <= 1.0 — GHSA-wqmp-2p5r-rhfv

Advisories 1

References