CVE-2022-28140

2022-03-2913:15:08

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

Jenkins Flaky Test Handler Plugin 1.2.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

CPENameOperatorVersion
flaky-test-handler-plugineqflaky-test-handler-1.0.3
flaky-test-handler-plugineqflaky-test-handler-1.1.0
flaky-test-handler-plugineqflaky-test-handler-1.0.2
flaky-test-handler-plugineqflaky-test-handler-1.0.2-4
flaky-test-handler-plugineqflaky-test-handler-1.2.0
flaky-test-handler-plugineqflaky-test-handler-1.0.4
flaky-test-handler-plugineq1.0.0
flaky-test-handler-plugineqflaky-test-handler-1.0.2-3
flaky-test-handler-plugineqflaky-test-handler-1.2.1
flaky-test-handler-plugineqflaky-test-handler-1.0.2-2

Name	Operator	Version
flaky-test-handler-plugin	eq	flaky-test-handler-1.0.3
flaky-test-handler-plugin	eq	flaky-test-handler-1.1.0
flaky-test-handler-plugin	eq	flaky-test-handler-1.0.2
flaky-test-handler-plugin	eq	flaky-test-handler-1.0.2-4
flaky-test-handler-plugin	eq	flaky-test-handler-1.2.0
flaky-test-handler-plugin	eq	flaky-test-handler-1.0.4
flaky-test-handler-plugin	eq	1.0.0
flaky-test-handler-plugin	eq	flaky-test-handler-1.0.2-3
flaky-test-handler-plugin	eq	flaky-test-handler-1.2.1
flaky-test-handler-plugin	eq	flaky-test-handler-1.0.2-2