CVE-2020-2138 Jenkins Cobertura Plugin 1.15 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks

Description

Jenkins Cobertura Plugin 1.15 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Jenkins Cobertura Plugin 1.15	premières → 1.15	Pas de correctif indiqué

Autres CVE de Jenkins Cobertura Plugin

Les 2 CVE de Jenkins Cobertura Plugin →

CVE-2020-2139 An arbitrary file write vulnerability in Jenkins Cobertura Plugin 1.15 and earlier allows attackers able to control… Non notée