CVEDB API

Jenkins Flaky Test Handler Plugin 1.2.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.092

EPSS Ranking 92.3%

CVSS Severity

CVSS v3 Score 8.1

CVSS v2 Score 5.5

References

Products affected by CVE-2022-28140

Jenkins » Flaky Test Handler » Version: 1.0.0

cpe:2.3:a:jenkins:flaky_test_handler:1.0.0
Jenkins » Flaky Test Handler » Version: 1.0.1

cpe:2.3:a:jenkins:flaky_test_handler:1.0.1
Jenkins » Flaky Test Handler » Version: 1.0.2

cpe:2.3:a:jenkins:flaky_test_handler:1.0.2
Jenkins » Flaky Test Handler » Version: 1.0.2-2

cpe:2.3:a:jenkins:flaky_test_handler:1.0.2-2
Jenkins » Flaky Test Handler » Version: 1.0.2-3

cpe:2.3:a:jenkins:flaky_test_handler:1.0.2-3
Jenkins » Flaky Test Handler » Version: 1.0.2-4

cpe:2.3:a:jenkins:flaky_test_handler:1.0.2-4
Jenkins » Flaky Test Handler » Version: 1.0.3

cpe:2.3:a:jenkins:flaky_test_handler:1.0.3
Jenkins » Flaky Test Handler » Version: 1.0.4

cpe:2.3:a:jenkins:flaky_test_handler:1.0.4
Jenkins » Flaky Test Handler » Version: 1.1.0

cpe:2.3:a:jenkins:flaky_test_handler:1.1.0
Jenkins » Flaky Test Handler » Version: 1.2.0

cpe:2.3:a:jenkins:flaky_test_handler:1.2.0
Jenkins » Flaky Test Handler » Version: 1.2.1

cpe:2.3:a:jenkins:flaky_test_handler:1.2.1