CVE-2020-2245 Jenkins Valgrind Plugin 0.28 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks

Description

Jenkins Valgrind Plugin 0.28 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Valgrind Plugin 0.28	earliest → 0.28	No fix stated

Other CVEs of Jenkins Valgrind Plugin

The 2 CVEs of Jenkins Valgrind Plugin →

CVE-2020-2246 Jenkins Valgrind Plugin 0.28 and earlier does not escape content in Valgrind XML reports, resulting in a stored… Not rated