Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-45397 EUVD-2022-7279GHSA-8847-xvjw-9g43

XXE vulnerability on agents in Jenkins OSF Builder Suite : : XML Linter Plugin

Published Nov 15, 2022 · Updated Apr 30, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins OSF Builder Suite : : XML Linter Plugin Package: org.jenkins-ci:update-center2 Category: Web / CMS Ecosystem: Maven

Description

Jenkins OSF Builder Suite : : XML Linter Plugin 1.0.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins OSF Builder Suite : : XML Linter Plugin unspecified – ≤ 1.0.2 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci:update-center2 <= 1.0.2 — GHSA-8847-xvjw-9g43

Advisories 1

References