Jenkins Config File Provider Plugin 3.7.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat Openshift | — | Upgrade python-kubernetesUpgrade ovn2.13Upgrade python-oslo-serializationUpgrade kata-containersUpgrade butaneUpgrade coreos-installerUpgrade openstack-ironic-inspectorUpgrade python-oslo-contextUpgrade python-oslo-concurrencyUpgrade ostreeUpgrade atomic-openshift-service-idlerUpgrade podmanUpgrade python-oslo-logUpgrade python-ironic-libUpgrade openstack-ironic-python-agentUpgrade python-jsonschemaUpgrade python-openshiftUpgrade python-hardwareUpgrade openshift-kuryrUpgrade python-oslo-configUpgrade python-ironic-prometheus-exporterUpgrade rust-afterburnUpgrade jenkins-2-pluginsUpgrade python-eventletUpgrade runcUpgrade openvswitch2.15Upgrade rteval-loadsUpgrade python-stevedoreUpgrade python-sushyUpgrade python-keystoneauth1Upgrade toolboxUpgrade python-oslo-policyUpgrade python-toozUpgrade haproxyUpgrade python-oslo-dbUpgrade python-debtcollectorUpgrade python-oslo-upgradecheckUpgrade redhat-release-coreosUpgrade jenkinsUpgrade openshift-clientsUpgrade ironic-images-ipa-x86_64Upgrade openshift-ansibleUpgrade openstack-ironicUpgrade ironic-imagesUpgrade cri-toolsUpgrade python-oslo-i18nUpgrade ignitionUpgrade ironic-images-ipa-ppc64leUpgrade python-oslo-serviceUpgrade python-pyrsistentUpgrade cri-oUpgrade console-login-helper-messagesUpgrade python-oslo-utilsUpgrade python-sushy-oem-idracUpgrade openshiftUpgrade python-openstacksdk | Jun 2, 2021 | Apr 21, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub