Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-45400 EUVD-2022-7277GHSA-8538-25v4-25pg

XXE vulnerability in Jenkins JAPEX Plugin

Published Nov 15, 2022 · Updated Apr 30, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins JAPEX Plugin Package: org.jvnet.hudson.plugins:japex Category: Web / CMS Ecosystem: Maven

Description

Jenkins JAPEX Plugin 1.7 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins JAPEX Plugin unspecified – ≤ 1.7 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jvnet.hudson.plugins:japex <= 1.7 — GHSA-8538-25v4-25pg

Advisories 1

References