VYPR

Crap4J Plugin

by Jenkins Project

CVEs (1)

  • CVE-2023-28680HigApr 2, 2023
    risk 0.49cvss 7.5epss 0.01

    Jenkins Crap4J Plugin 0.9 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.