CVE-2020-2171 Jenkins RapidDeploy Plugin 4.2 and earlier does not configure its XML parser to prevent XML external entity (XXE)…

Description

Jenkins RapidDeploy Plugin 4.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins RapidDeploy Plugin 4.2	earliest → 4.2	No fix stated

Other CVEs of Jenkins RapidDeploy Plugin

The 4 CVEs of Jenkins RapidDeploy Plugin →

CVE-2020-2170 Jenkins RapidDeploy Plugin 4.2 and earlier does not escape package names in the table of packages obtained from a remote… Not rated CVE-2019-16571 A missing permission check in Jenkins RapidDeploy Plugin 4.1 and earlier allows attackers with Overall/Read permission… Not rated CVE-2019-16570 A cross-site request forgery vulnerability in Jenkins RapidDeploy Plugin 4.1 and earlier allows attackers to connect… Not rated