CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2023-37942
https://notcve.org/view.php?id=CVE-2023-37942
Jenkins External Monitor Job Type Plugin 206.v9a_94ff0b_4a_10 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. • http://www.openwall.com/lists/oss-security/2023/07/12/2 https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3133 • CWE-611: Improper Restriction of XML External Entity Reference •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2022-36886
https://notcve.org/view.php?id=CVE-2022-36886
A cross-site request forgery (CSRF) vulnerability in Jenkins External Monitor Job Type Plugin 191.v363d0d1efdf8 and earlier allows attackers to create runs of an external job. Una vulnerabilidad de tipo cross-site request forgery (CSRF) en Jenkins External Monitor Job Type Plugin versiones 191.v363d0d1efdf8 y anteriores, permite a atacantes crear ejecuciones de un trabajo externo • http://www.openwall.com/lists/oss-security/2022/07/27/1 https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2762 • CWE-352: Cross-Site Request Forgery (CSRF) •