← CVE Intelligence

CVE-2023-28683

Jenkins Project / Jenkins Phabricator Differential Plugin PUBLISHED

Description (CNA)

Jenkins Phabricator Differential Plugin 2.1.5 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected (CNA)

Vendor / productVersions
Jenkins Project / Jenkins Phabricator Differential Pluginaffected 0 through 2.1.5

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.