Executive brief
Job Configuration History Plugin's path traversal allows exploiting XXE vulnerability
Affected products
- Maven org.jenkins-ci.plugins:jobConfigHistory
Junglewise Threat Intelligence
CVE-2023-41933: Job Configuration History Plugin's path traversal allows exploiting XXE vulnerability
CVE-2023-41933 · Severity: low · CVSS 3.1 · Published 2023-09-06
Technologies: org.jenkins-ci.plugins:jobConfigHistory (Maven). Vendors: Maven.
Related threats
- Jenkins Job Configuration History Plugin information disclosure in configuration history
- XSS vulnerability in Jenkins Job Configuration History Plugin
- Path traversal in Jenkins Job Configuration History Plugin
- Path traversal allows exploiting XXE vulnerability in Jenkins Job Configuration History Plugin
- Cross-site Scripting in Jenkins Job Configuration History Plugin