GHSA-h8p8-6378-649p

GitHub Security Advisory

XML external entity reference vulnerability on agents in Jenkins Semantic Versioning Plugin

✓ GitHub Reviewed CRITICAL Has CVE

Jenkins Semantic Versioning Plugin 1.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Maven org.jenkins-ci.plugins:semantic-versioning-plugin

Affected versions: 0 (fixed in 1.15)

CVE-2023-24430

GHSA ID

GHSA-h8p8-6378-649p

Published

January 26, 2023 9:30 PM

Last Modified

February 6, 2023 4:41 PM

CVSS Score

9.0 /10

Primary Ecosystem

Maven

Primary Package

org.jenkins-ci.plugins:semantic-versioning-plugin

GitHub Reviewed

✓ Yes

Last updated: July 3, 2025 6:26 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.