CVE-2022-28155

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks

published March 29, 2022

CVSS
—
EPSS
1%
Percentile
56.1
In the wild
Unconfirmed
What it is

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00800 · 56.1th percentile
Published
2022-03-29T12:31Z
EPSS history
Timeline
  • 29 MAR 12:31Z
    Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks
    cvelistv5