{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-11T23:34:03.333","vulnerabilities":[{"cve":{"id":"CVE-2019-1003015","sourceIdentifier":"jenkinsci-cert@googlegroups.com","published":"2019-02-06T16:29:00.780","lastModified":"2024-11-21T04:17:44.650","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An XML external entity processing vulnerability exists in Jenkins Job Import Plugin 2.1 and earlier in src/main/java/org/jenkins/ci/plugins/jobimport/client/RestApiClient.java that allows attackers with the ability to control the HTTP server (Jenkins) queried in preparation of job import to read arbitrary files, perform a denial of service attack, etc."},{"lang":"es","value":"Existe una vulnerabilidad de procesamiento de entidades externas XML en Jenkins Job Import Plugin, en versiones 2.1 y anteriores, en src/main/java/org/jenkins/ci/plugins/jobimport/client/RestApiClient.java, que permite que los atacantes con capacidad para controlar el servidor HTTP (Jenkins) en \"query\" para prepararse para una importación de trabajo lean archivos arbitrarios, realicen una denegación de servicio (DoS), etc."}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-611"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jenkins:job_import:*:*:*:*:*:jenkins:*:*","versionEndIncluding":"2.1","matchCriteriaId":"DA81E155-05B4-4FE7-B0AA-C3EDF73D5189"}]}]}],"references":[{"url":"https://jenkins.io/security/advisory/2019-01-28/#SECURITY-905%20%281%29","source":"jenkinsci-cert@googlegroups.com"},{"url":"https://jenkins.io/security/advisory/2019-01-28/#SECURITY-905%20%281%29","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}