Skip to content
OpenAdvisories
High · 7.1 CVE-2023-28685 EUVD-2023-2162GHSA-wf8m-qr47-xc9m

Jenkins AbsInt a³ Plugin XML External Entity Reference vulnerability

Published Mar 21, 2023 · Updated Feb 26, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins AbsInt a³ Plugin Package: org.jenkins-ci.plugins:absint-a3 Category: Web / CMS Ecosystem: Maven

Description

Jenkins AbsInt a³ Plugin 1.1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

VendorProductAffectedFixed
Jenkins Project Jenkins AbsInt a³ Plugin ≤ 1.1.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:absint-a3 <= 1.1.0 — GHSA-wf8m-qr47-xc9m

Advisories 1

References