high7.5
CVE-2015-1809
XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPa…
Impact
XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Cloudbees | before 1.596.1 before 1.600 |