Skip to content
OpenAdvisories
High · 7.5 CVE-2022-43415 EUVD-2022-6995GHSA-2w2m-ccf8-57cq

XXE vulnerability in Jenkins REPO Plugin

Published Oct 19, 2022 · Updated May 9, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins REPO Plugin Package: org.jenkins-ci.plugins:repo Category: Web / CMS Ecosystem: Maven

Description

Jenkins REPO Plugin 1.15.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins REPO Plugin unspecified – ≤ 1.15.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:repo < 1.16.0 1.16.0 GHSA-2w2m-ccf8-57cq

Advisories 1

References