VULNERABILITY INTELLIGENCE

CVE-2018-1000008

CVSS score8.8 HIGH

EPSS probability1.17%

CISA KEVNot currently listed

Published2018-01-23

Last modified2026-06-17

Description

Jenkins PMD Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks.