CVE-2018-1000010

Jenkins DRY Plugin 2.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions…

published January 23, 2018

CVSS
—
EPSS
1%
Percentile
60.8
In the wild
Unconfirmed
What it is

Jenkins DRY Plugin 2.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00946 · 60.8th percentile
Published
2018-01-23T14:00Z
EPSS history
Timeline
  • 23 JAN 14:00Z
    Jenkins DRY Plugin 2.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions…
    cvelistv5