Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-28684 EUVD-2023-1204GHSA-58ch-c2jf-5g23

Jenkins remote-jobs-view-plugin vulnerable to XML external entity attacks

Published Mar 23, 2023 · Updated Feb 20, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins remote-jobs-view-plugin Plugin Package: com.sap.jenkinsci:remote-jobs-view-plugin Category: Web / CMS Ecosystem: Maven

Description

Jenkins remote-jobs-view-plugin Plugin 0.0.3 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

VendorProductAffectedFixed
Jenkins Project Jenkins remote-jobs-view-plugin Plugin ≤ 0.0.3 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven com.sap.jenkinsci:remote-jobs-view-plugin <= 0.0.3 — GHSA-58ch-c2jf-5g23

Advisories 1

References