fr Sign in

Not rated

CVE-2020-2324 Jenkins CVS Plugin 2.16 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks

Description

Jenkins CVS Plugin 2.16 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins CVS Plugin 2.16	earliest → 2.16	No fix stated

References

www.jenkins.io www.jenkins.io
[oss-security] 20201203 Multiple vulnerabilities in Jenkins www.openwall.com

Timeline

Published December 3, 2020
Last modified August 4, 2024

The 3 CVEs of Jenkins CVS Plugin →

CVE-2022-29037 Jenkins CVS Plugin 2.19 and earlier does not escape the name and description of CVS Symbolic Name parameters on views… Not rated CVE-2020-2184 A cross-site request forgery vulnerability in Jenkins CVS Plugin 2.15 and earlier allows attackers to create and… Not rated

Track this CVE