CVE-2019-16549

Jenkins Maven Release Plugin 0.16.1 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks, allowing man-in-the-middle…

published December 17, 2019

CVSS
—
EPSS
1%
Percentile
61.5
In the wild
Unconfirmed
What it is

Jenkins Maven Release Plugin 0.16.1 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks, allowing man-in-the-middle attackers to have Jenkins parse crafted XML documents.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00969 · 61.5th percentile
Published
2019-12-17T14:40Z
EPSS history
Timeline
  • 17 DEC 14:40Z
    Jenkins Maven Release Plugin 0.16.1 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks, allowing man-in-the-middle…
    cvelistv5