CVE-2019-10466: Jenkins 360 Fireline

High severity, CVSS 8.1. EPSS: 1% chance of exploitation in the next 30 days.

An XML external entities (XXE) vulnerability in Jenkins 360 FireLine Plugin allows attackers with Overall/Read access to have Jenkins resolve external entities, resulting in the extraction of secrets from the Jenkins agent, server-side request forgery, or denial-of-service attacks.

Affected products

• Jenkins 360 Fireline: up to and including 1.7.2

Published 2019-10-23. Last modified 2026-06-17.