-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| com.sap.jenkinsci:remote-jobs-view-plugin | maven | <= 0.0.3 |
Miggo AIRoot Cause AnalysisThe vulnerability root cause is explicitly stated as improper XML parser configuration for XXE prevention. While exact code locations aren't provided, all XML parsing functions that: 1) Process user-controllable input 2) Use DocumentBuilder/SAXParser without security features like FEATURE_SECURE_PROCESSING or disallow-doctype-decl 3) Handle job configuration/data retrieval from remote sources would be vulnerable. This matches Jenkins plugin vulnerability patterns where XXE typically occurs in XML processing of untrusted data.