XML external entity reference vulnerability on agents in Jenkins Semantic Versioning Plugin

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-24430 · ADVISORY
• jenkinsci/semantic-versioning-plugin commit 8df2fab · WEB
• jenkins.io/security/advisory/2023-01-24 · WEB
• jenkins.io/security/advisory/2023-01-24 · Vendor Advisory

org.jenkins-ci.plugins:semantic-versioning-plugin のその他の脆弱性

• CVE-2023-24429緊急 9.8Jenkins Semantic Versioning Plugin 1.14 and earlier does not restrict execution of an controller/agent message to agents, and implements no …
• CVE-2022-27201中 6.5Jenkins Semantic Versioning Plugin 1.13 and earlier does not restrict execution of an controller/agent message to agents, and implements no …