CVE-2023-41933: XEE
Published Sep 6, 2023
·Updated
Jenkins Job Configuration History Plugin 1227.v7a79fc4dc01f and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected Software
1 affected component
jenkins Job Configuration History Jenkins<=1229.v3039470161a_d
Event History
Sep 6, 2023
CVE Published
12:08 PM
Data Sourced
12:08 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-41933.
2
What is the title of this vulnerability?
The title of this vulnerability is 'Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not configure its XML …'.
3
What is the severity of CVE-2023-41933?
The severity of CVE-2023-41933 is high, with a CVSS score of 8.8.
4
What is the affected software for CVE-2023-41933?
The affected software for CVE-2023-41933 is Jenkins Job Configuration History Plugin version 1229.v3039470161a_d and earlier.
5
How can I fix CVE-2023-41933?
To fix CVE-2023-41933, update the Jenkins Job Configuration History Plugin to a version that configures its XML parser to prevent XML external entity (XXE) attacks.