high7.5
CVE-2015-1811
XML external entity (XXE) vulnerability in Jenkins
Impact
XML external entity (XXE) vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.jenkins-ci.main:jenkins-core | >= 1.597, < 1.600 | 1.600 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Cloudbees | before 1.596.1 before 1.600 |