CWE-652 · Injection and Smuggling
Improper Neutralization of Data within XQuery Expressions
2CVEs
SortMost likely exploited
2 CVEs with CWE-652 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-28676A cross-site request forgery (CSRF) vulnerability in Jenkins Convert To Pipeline Plugin 1.0 and earlier allows attackers to create a Pipeline based on a Freestyle project, potenti…Jenkins Project · Jenkins Convert To Pipeline Plugin · CVSS 8.8 · 2023-03-23 | 8.8 | 0.6% | 2023-03-23 |
| CVE-2023-25015Clockwork Web before 0.1.2, when Rails before 5.2 is used, allows CSRF.Clockwork Web Project · Clockwork Web · CVSS 6.5 · 2023-02-02 | 6.5 | 0.4% | 2023-02-02 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.