Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-46682 EUVD-2022-7761GHSA-wgpp-g6v9-7hxp

Jenkins Plot Plugin XML External Entity Reference vulnerability

Published Dec 7, 2022 · Updated Apr 23, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Plot Plugin Package: org.jenkins-ci.plugins:plot Category: Web / CMS Ecosystem: Maven

Description

Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

VendorProductAffectedFixed
Jenkins Project Jenkins Plot Plugin unspecified – ≤ 2.1.11 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:plot < 2.1.12 2.1.12 GHSA-wgpp-g6v9-7hxp

Advisories 1

References