https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T23:52:25.450144+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-54943 cnvd-2022-54943 2026-10-18T23:52:25.453181+00:00 cnvd-2022-54943 https://cve.radiocsirt.org/vuln/euvd-2026-15637 EUVD-2026-15637 2026-10-18T23:52:25.453211+00:00 EUVD-2026-15637 https://cve.radiocsirt.org/vuln/fkie_cve-2022-28154 fkie_cve-2022-28154 2026-10-18T23:52:25.453225+00:00

Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

 https://cve.radiocsirt.org/vuln/ghsa-8rx6-v5q4-xw3j GHSA-8rx6-v5q4-xw3j — enkins Coverage/Complexity Scatter Plot Plugin XML External Entity Reference vulnerability 2026-10-18T23:52:25.453252+00:00

Affected: Maven: org.jenkins-ci.plugins:covcomplplot

Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

This allows attackers able to control the input files for the 'Public Coverage / Complexity Scatter Plot' post-build step to have Jenkins parse a crafted file that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.

As of publication of this advisory, there is no fix.

 https://cve.radiocsirt.org/vuln/gsd-2022-28154 gsd-2022-28154 2026-10-18T23:52:25.453278+00:00 gsd-2022-28154