Executive brief
XXE vulnerability in Jenkins Job Import Plugin
Affected products
- Maven org.jenkins-ci.plugins:job-import-plugin
Junglewise Threat Intelligence
CVE-2019-1003015: XXE vulnerability in Jenkins Job Import Plugin
CVE-2019-1003015 · Severity: low · CVSS 3 · Published 2022-05-13
Technologies: org.jenkins-ci.plugins:job-import-plugin (Maven). Vendors: Maven.
Related threats
- Jenkins Job Import Plugin missing permission check in HTTP endpoint
- Jenkins Job Import Plugin allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins
- Jenkins Job Import Plugin CSRF vulnerability
- Jenkins Job Import Plugin vulnerable to exposure of sensitive information