CVE-2015-1809

Опубликовано: 15 янв. 2020

Источник: debian

EPSS Низкий

Описание

XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
jenkins	removed			package

Примечания

https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-02-27

EPSS

Процентиль: 70%

0.01414

Низкий

Связанные уязвимости

CVE-2015-1809

CVSS3: 7.5

ubuntu

больше 6 лет назад

XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query.

CVE-2015-1809

redhat

больше 11 лет назад

XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query.

CVE-2015-1809

CVSS3: 7.5

nvd

больше 6 лет назад

XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query.

GHSA-qj27-w92h-fc9r

CVSS3: 7.5

github

около 4 лет назад

XML external entity (XXE) vulnerability in Jenkins

EPSS

Процентиль: 70%

0.01414

Низкий