← CVE Intelligence

CVE-2023-28680

Jenkins Project / Jenkins Crap4J Plugin PUBLISHED

Description (CNA)

Jenkins Crap4J Plugin 0.9 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected (CNA)

Vendor / productVersions
Jenkins Project / Jenkins Crap4J Pluginaffected 0 through 0.9

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.