PT-2020-7808
CVE-2015-1811
·
تاريخ النشر
2020-01-15
·
تاريخ التحديث
2022-05-24
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Jenkins versions prior to 1.600
Jenkins LTS versions prior to 1.596.1
Description:
The issue allows remote attackers to read arbitrary XML files via a crafted XML document, exploiting an XML external entity (XXE) vulnerability. This enables attackers to access sensitive data by manipulating XML documents.
Recommendations:
For Jenkins versions prior to 1.600, update to version 1.600 or later.
For Jenkins LTS versions prior to 1.596.1, update to version 1.596.1 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾