Not rated
CVE-2020-2284 Jenkins Liquibase Runner Plugin 1.4.5 and earlier does not configure its XML parser to prevent XML external entity (XXE)…
Description
Jenkins Liquibase Runner Plugin 1.4.5 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Liquibase Runner Plugin 1.4 | earliest → 1.4.5 | No fix stated |
References
- www.jenkins.io www.jenkins.io
- [oss-security] 20200923 Multiple vulnerabilities in Jenkins plugins www.openwall.com
Timeline
- Published
- Last modified