CVE-2018-1000011

—

CVSS 3.0

8.8 high

EPSS

<1%p59

Published

Jan 23, 2018 (Jan 23, 2018)

Modified

Jun 17, 2026

Description

Jenkins FindBugs Plugin 4.71 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks.

Vendors: jenkins
Products: findbugs
Weakness: CWE-611
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.