Sign in

9.8 Critical

CVE-2023-24443 Jenkins TestComplete support Plugin 2.8.1 and earlier does not configure its XML parser to prevent XML external entity…

Description

Jenkins TestComplete support Plugin 2.8.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins TestComplete support Plugin 2.8	earliest → 2.8.1	No fix stated

The 3 CVEs of Jenkins TestComplete support Plugin →

CVE-2023-33002 Jenkins TestComplete support Plugin 2.8.1 and earlier does not escape the TestComplete project name, resulting in a… 5.4 Medium CVE-2020-2209 Jenkins TestComplete support Plugin 2.4.1 and earlier stores a password unencrypted in job config.xml files on the… Not rated

Do you use Jenkins TestComplete support Plugin?

Track this CVE Watch Jenkins TestComplete support Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2023-24443

Timeline

Published January 24, 2023
Last modified April 2, 2025

References

www.jenkins.io www.jenkins.io

Track this CVE