CVE-2018-1000054

Jenkins CCM Plugin 3.1 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in…

published February 9, 2018

CVSS
—
EPSS
1%
Percentile
57.7
In the wild
Unconfirmed
What it is

Jenkins CCM Plugin 3.1 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00849 · 57.7th percentile
Published
2018-02-09T23:00Z
EPSS history
Timeline
  • 09 FEB 23:00Z
    Jenkins CCM Plugin 3.1 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in…
    cvelistv5