CVE-2018-1000008

Jenkins PMD Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions…

published January 23, 2018

CVSS
—
EPSS
1%
Percentile
67.3
In the wild
Unconfirmed
What it is

Jenkins PMD Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01172 · 67.3th percentile
Published
2018-01-23T14:00Z
EPSS history
Timeline
  • 23 JAN 14:00Z
    Jenkins PMD Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions…
    cvelistv5