Executive brief
XML External Entity processing vulnerability in Pipeline Maven Integration Jenkins Plugin
Affected products
- Maven org.jenkins-ci.plugins:pipeline-maven
Junglewise Threat Intelligence
CVE-2019-10327: XML External Entity processing vulnerability in Pipeline Maven Integration Jenkins Plugin
CVE-2019-10327 · Severity: low · CVSS 3 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:pipeline-maven (Maven). Vendors: Maven.
Related threats
- Improper masking of credentials in Jenkins Pipeline Maven Integration Plugin
- Stored XSS vulnerability in Pipeline Maven Integration Plugin via unescaped display name
- CSRF vulnerability in Jenkins Pipeline Maven Integration Plugin allow capturing credentials
- Missing permission check in Jenkins Pipeline Maven Integration Plugin allows enumerating credentials IDs
- Missing permission check in Jenkins Pipeline Maven Integration Plugin allow capturing credentials