CVE-2026-70448: CVE-2026-70448: XML dış varlık (XXE)

Açıklama (NVD)

Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks when processing Ivy report files.

Özet bilgiler

CVSS v3.1

7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

EPSS

%0,32 (yüzdelik 26)

CWE

CWE-611

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• www.jenkins.io
• CWE-611