CVE-2022-34793: Improper Restriction of XML External Entity Reference

July 1, 2022 (updated July 12, 2022)

Jenkins Recipe Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

References

github.com/advisories/GHSA-rm23-6mwv-8q9q
nvd.nist.gov/vuln/detail/CVE-2022-34793
www.jenkins.io/security/advisory/2022-06-30/

Detect and mitigate CVE-2022-34793 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →