ZeroHour

CVE-2023-28683

CVSS 3.1
8.2 high
EPSS
<1%p45
Published
()
Modified
Description

Jenkins Phabricator Differential Plugin 2.1.5 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Vendors
jenkins
Products
phabricator differential
Weakness
CWE-611
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

In the news

No ingested article mentions this CVE yet.