← CVE Intelligence

CVE-2023-28681

Jenkins Project / Jenkins Visual Studio Code Metrics Plugin PUBLISHED

Description (CNA)

Jenkins Visual Studio Code Metrics Plugin 1.7 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected (CNA)

Vendor / productVersions
Jenkins Project / Jenkins Visual Studio Code Metrics Pluginaffected 0 through 1.7

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.