CVE-2022-41241 | Severity.io

Description

Jenkins RQM Plugin 2.8 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Related CPE's

Vulnerable

References

Vendor Advisory

Vendor Advisory

Weaknesses

Primary

CWE-611

Secondary

CWE-611

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

9.1 · Critical

Information

Source identifier

Vulnerability status

Modified

Published

2022-09-21T16:15:10.847

3 years ago

Last modified

2025-05-28T15:15:22.803

7 months ago