Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2022-30971
Disclosure Date: May 17, 2022 (last updated October 25, 2023)
Jenkins Storable Configs Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
0
Attacker Value
Unknown
CVE-2020-2277
Disclosure Date: September 16, 2020 (last updated February 22, 2025)
Jenkins Storable Configs Plugin 1.0 and earlier allows users with Job/Read permission to read arbitrary files on the Jenkins controller.
0
Attacker Value
Unknown
CVE-2020-2278
Disclosure Date: September 16, 2020 (last updated February 22, 2025)
Jenkins Storable Configs Plugin 1.0 and earlier does not restrict the user-specified file name, allowing attackers with Job/Configure permission to replace any other '.xml' file on the Jenkins controller with a job config.xml file's content.
0
