Vulnerabilities > Jenkins > Flaky Test Handler > 1.0.2.2

DATE CVE VULNERABILITY TITLE RISK
2022-03-29 CVE-2022-28140 XXE vulnerability in Jenkins Flaky Test Handler
Jenkins Flaky Test Handler Plugin 1.2.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
network
low complexity
jenkins CWE-611
8.1
2020-08-12 CVE-2020-2237 Cross-Site Request Forgery (CSRF) vulnerability in Jenkins Flaky Test Handler
A cross-site request forgery (CSRF) vulnerability in Jenkins Flaky Test Handler Plugin 1.0.4 and earlier allows attackers to rebuild a project at a previous git revision.
network
low complexity
jenkins CWE-352
4.3