Executive brief
Path traversal allows exploiting XXE vulnerability in Jenkins Job Configuration History Plugin
Affected products
- Maven org.jenkins-ci.plugins:jobConfigHistory
Junglewise Threat Intelligence
CVE-2023-41932: Path traversal allows exploiting XXE vulnerability in Jenkins Job Configuration History Plugin
CVE-2023-41932 · Severity: low · CVSS 3.1 · Published 2023-09-06
Technologies: org.jenkins-ci.plugins:jobConfigHistory (Maven). Vendors: Maven.
Related threats
- Jenkins Job Configuration History Plugin information disclosure in configuration history
- XSS vulnerability in Jenkins Job Configuration History Plugin
- Path traversal in Jenkins Job Configuration History Plugin
- Job Configuration History Plugin's path traversal allows exploiting XXE vulnerability
- Cross-site Scripting in Jenkins Job Configuration History Plugin