CVE-2018-1000009

Improper Restriction of XML External Entity Reference in maven/org.jvnet.hudson.plugins/checkstyle

Identifiers

GHSA-jfj9-7j5w-6xgx, CVE-2018-1000009

Package Slug

maven/org.jvnet.hudson.plugins/checkstyle

Vulnerability

Improper Restriction of XML External Entity Reference

Description

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks.

Affected Versions

All versions before 3.50

Solution

Upgrade to version 3.50 or above.

Last Modified

2024-01-31

source