CVE-2018-1000012

Improper Restriction of XML External Entity Reference in maven/org.jvnet.hudson.plugins/warnings

Identifiers

GHSA-p498-rpcw-3578, CVE-2018-1000012

Package Slug

maven/org.jvnet.hudson.plugins/warnings

Vulnerability

Improper Restriction of XML External Entity Reference

Description

Jenkins Warnings Plugin 4.64 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks.

Affected Versions

All versions up to 4.64

Solution

Upgrade to version 4.65 or above.

Last Modified

2024-01-31

source