CVE-2022-28140: XEE
Published Mar 29, 2022
·Updated
Jenkins Flaky Test Handler Plugin 1.2.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected Software
1 affected component
Jenkins Flaky Test Handler<=1.2.1
Event History
Mar 29, 2022
CVE Published
via MITRE·12:30 PM
Data Sourced
via MITRE·12:30 PM
Description
Frequently Asked Questions
1
What is CVE-2022-28140?
CVE-2022-28140 is a vulnerability in Jenkins Flaky Test Handler Plugin 1.2.1 and earlier that allows XML external entity (XXE) attacks.
2
How does CVE-2022-28140 impact Jenkins Flaky Test Handler Plugin?
CVE-2022-28140 allows XML external entity (XXE) attacks on Jenkins Flaky Test Handler Plugin 1.2.1 and earlier.
3
What is the severity of CVE-2022-28140?
CVE-2022-28140 has a severity of 8.1 (high).
4
How can I fix CVE-2022-28140 in Jenkins Flaky Test Handler Plugin?
To fix CVE-2022-28140, upgrade Jenkins Flaky Test Handler Plugin to a version later than 1.2.1.
5
Where can I find more information about CVE-2022-28140?
You can find more information about CVE-2022-28140 in the references section of the Jenkins security advisory and the Openwall mailing list.