GHSA-v4rr-65x6-g69f

GitHub Security Advisory

XXE vulnerability in Jenkins Flaky Test Handler Plugin

✓ GitHub Reviewed HIGH Has CVE

Jenkins Flaky Test Handler Plugin 1.2.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Maven org.jenkins-ci.plugins:flaky-test-handler

Affected versions: 0 (fixed in 1.2.2)

CVE-2022-28140

GHSA ID

GHSA-v4rr-65x6-g69f

Published

March 30, 2022 12:00 AM

Last Modified

May 3, 2022 8:56 PM

CVSS Score

7.5 /10

Primary Ecosystem

Maven

Primary Package

org.jenkins-ci.plugins:flaky-test-handler

GitHub Reviewed

✓ Yes

Last updated: July 3, 2025 6:26 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.