CVE Catalog
CVE-2023-37942
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.51%
39th percentile - higher than 39% of all known CVEs
Summary
The Jenkins External Monitor Job Type Plugin version 206.v9a_94ff0b_4a_10 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Risk Assessment
The lack of proper XML parser configuration may lead to the exposure of sensitive data or attacks on the organization's internal systems.
Recommendation
It is recommended to update the plugin to the latest version that improves the XML parser configuration to minimize the risk of XXE attacks.
Original NVD description (English source)
Jenkins External Monitor Job Type Plugin 206.v9a_94ff0b_4a_10 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.