CVE-2020-2115 Jenkins NUnit Plugin 0.25 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks

Description

Jenkins NUnit Plugin 0.25 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins NUnit Plugin 0.25	earliest → 0.25	No fix stated

Other CVEs of Jenkins NUnit Plugin

The 2 CVEs of Jenkins NUnit Plugin →

CVE-2022-43414 Jenkins NUnit Plugin 0.27 and earlier implements an agent-to-controller message that parses files inside a… 5.3 Medium