Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-41226 EUVD-2022-6815GHSA-g43x-pcc9-f472

Jenkins Compuware Common Configuration Plugin vulnerable to Improper Restriction of XML External Entity Reference

Published Sep 21, 2022 · Updated May 28, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Compuware Common Configuration Plugin Package: com.compuware.jenkins:compuware-common-configuration Category: Web / CMS Ecosystem: Maven

Description

Jenkins Compuware Common Configuration Plugin 1.0.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Compuware Common Configuration Plugin unspecified – ≤ 1.0.14 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven com.compuware.jenkins:compuware-common-configuration < 1.0.15 1.0.15 GHSA-g43x-pcc9-f472

References