Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-45395 EUVD-2022-7321GHSA-f3gj-hvv4-f57v

XML External Entity Reference in Jenkins CCCC Plugin

Published Nov 15, 2022 · Updated Apr 30, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins CCCC Plugin Package: com.thalesgroup.jenkins-ci.plugins:cccc Category: Web / CMS Ecosystem: Maven

Description

Jenkins CCCC Plugin 0.6 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins CCCC Plugin unspecified – ≤ 0.6 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven com.thalesgroup.jenkins-ci.plugins:cccc <= 0.6 — GHSA-f3gj-hvv4-f57v

Advisories 1

References