ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2018-1000055

—
CVSS 3.0
8.3 high
EPSS
<1%p56
Published
()
Modified
Description

Jenkins Android Lint Plugin 2.5 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks.

Vendors
jenkins
Products
android lint
Weakness
CWE-611, CWE-918
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news

No ingested article mentions this CVE yet.