XML external entity (XXE) vulnerability in the create-job CLI command in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to read arbitrary files via a crafted job configuration that is then used in an "XML-aware tool," as demonstrated by get-job and update-job.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Jenkins 2015 11 11 | — | Upgrade Jenkins to version 1.638Upgrade Jenkins to the latest versionUpgrade Jenkins LTS to the latest versionUpgrade Jenkins LTS to version 1.625.2 | Nov 13, 2017 | Nov 25, 2015 |
| Redhat Openshift | — | Upgrade nodejs-lowercase-keysUpgrade nodejs-map-streamUpgrade nodejs-async-eachUpgrade nodejs-is-primitiveUpgrade nodejs-undefsafeUpgrade openshift-origin-broker-utilUpgrade nodejs-fromUpgrade nodejs-duplexifyUpgrade nodejs-expand-rangeUpgrade nodejs-lodash.bindcallbackUpgrade nodejs-capture-stack-traceUpgrade nodejs-is-streamUpgrade nodejs-ps-treeUpgrade nodejs-os-tmpdirUpgrade nodejs-extglobUpgrade nodejs-expand-bracketsUpgrade jenkinsUpgrade nodejs-registry-urlUpgrade rubygem-openshift-origin-commonUpgrade openvswitchUpgrade nodejs-binary-extensionsUpgrade openshift-origin-msg-node-mcollectiveUpgrade nodejs-is-globUpgrade nodejs-repeat-elementUpgrade nodejs-ansi-greenUpgrade nodejs-pinkieUpgrade nodejs-os-homedirUpgrade nodejs-url-parse-laxUpgrade nodejs-is-dotfileUpgrade nodejs-update-notifierUpgrade nodejs-isobjectUpgrade nodejs-arr-diffUpgrade nodejs-arr-flattenUpgrade nodejs-stream-combinerUpgrade openshift-origin-node-utilUpgrade nodejs-optimistUpgrade nodejs-array-uniqueUpgrade nodejs-kind-ofUpgrade nodejs-is-numberUpgrade nodejs-gotUpgrade nodejs-pause-streamUpgrade nodejs-strip-json-commentsUpgrade origin-kibanaUpgrade rubygem-openshift-origin-frontend-apache-vhostUpgrade nodejs-latest-versionUpgrade nodejs-align-textUpgrade nodejs-write-file-atomicUpgrade nodejs-regex-cacheUpgrade nodejs-error-exUpgrade nodejs-xdg-basedirUpgrade openshift-origin-cartridge-cronUpgrade nodejs-lodash.assignUpgrade phpUpgrade nodejs-lodash.isargumentsUpgrade openshift-enterprise-upgradeUpgrade nodejs-osenvUpgrade nodejs-lazy-cacheUpgrade nodejs-rcUpgrade nodejs-anymatchUpgrade nodejs-object.omitUpgrade nodejs-is-redirectUpgrade nodejs-node-status-codesUpgrade openshift-origin-cartridge-haproxyUpgrade nodejs-throughUpgrade nodejs-create-error-classUpgrade rubygem-openshift-origin-controllerUpgrade nodejs-unzip-responseUpgrade nodejs-configstoreUpgrade nodejs-glob-parentUpgrade nodejs-es6-promiseUpgrade openshift-origin-cartridge-phpUpgrade nodejs-end-of-streamUpgrade rubygem-openshift-origin-consoleUpgrade nodejs-semverUpgrade nodejs-filename-regexUpgrade nodejs-normalize-pathUpgrade openshift-origin-cartridge-pythonUpgrade nodejs-string-lengthUpgrade nodejs-ansi-wrapUpgrade heapsterUpgrade nodejs-for-inUpgrade atomic-openshiftUpgrade nodejs-duplexerUpgrade nodejs-is-binary-pathUpgrade nodejs-is-extglobUpgrade nodejs-arrifyUpgrade nodejs-mkdirpUpgrade nodejs-lodash.isarrayUpgrade nodejs-bracesUpgrade nodejs-preserveUpgrade nodejs-readdirpUpgrade nss_wrapperUpgrade nodejs-lodash.getnativeUpgrade nodejs-iniUpgrade nodejs-for-ownUpgrade nodejs-pinkie-promiseUpgrade nodejs-is-plain-objUpgrade rhcUpgrade nodejs-event-streamUpgrade nodejs-lodash.basecopyUpgrade nodejs-glob-baseUpgrade nodejs-lodash.restparamUpgrade openshift-origin-cartridge-mysqlUpgrade nodejs-touchUpgrade nodejs-lodash.defaultsUpgrade nodejs-object-assignUpgrade nodejs-read-all-streamUpgrade nodejs-is-extendableUpgrade nodejs-lodash.keysUpgrade nodejs-semver-diffUpgrade nodejs-is-equal-shallowUpgrade nodejs-randomaticUpgrade activemqUpgrade nodejs-splitUpgrade nodejs-parse-jsonUpgrade nodejs-graceful-fsUpgrade nodejs-package-jsonUpgrade nodejs-lodash.isiterateecallUpgrade nodejs-chokidarUpgrade nodejs-slideUpgrade openshift-origin-node-proxyUpgrade nodejs-uuidUpgrade nodejs-nodemonUpgrade nodejs-fill-rangeUpgrade nodejs-is-npmUpgrade nodejs-parse-globUpgrade nodejs-deep-extendUpgrade rubygem-openshift-origin-nodeUpgrade nodejs-lodash.baseassignUpgrade nodejs-micromatchUpgrade nodejs-prepend-httpUpgrade nodejs-success-symbolUpgrade openshift-ansibleUpgrade nodejs-timed-outUpgrade nodejs-lodash.createassigner | Jun 18, 2018 | Nov 11, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub