Not rated

CVE-2020-2092 Jenkins Robot Framework Plugin 2.0.0 and earlier does not configure its XML parser to prevent XML external entity…

Description

Jenkins Robot Framework Plugin 2.0.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing users with Job/Configure to have Jenkins parse crafted XML documents.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Robot Framework Plugin 2.0	earliest → 2.0.0	No fix stated

The 2 CVEs of Jenkins Robot Framework Plugin →

CVE-2026-92137 Jenkins Robot Framework Plugin 6.2.2 and earlier does not check that the archive directory configured for Robot… 8.8 High

Do you use Jenkins Robot Framework Plugin?

Track this CVE Watch Jenkins Robot Framework Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2020-2092

Timeline

Published January 15, 2020
Last modified August 4, 2024

References

jenkins.io jenkins.io

Track this CVE

CVE-2020-2092 Jenkins Robot Framework Plugin 2.0.0 and earlier does not configure its XML parser to prevent XML external entity…

Description

Affected products and versions

Other CVEs of Jenkins Robot Framework Plugin