CVE-2020-2171 Jenkins RapidDeploy Plugin 4.2 and earlier does not configure its XML parser to prevent XML external entity (XXE)…

Description

Jenkins RapidDeploy Plugin 4.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Jenkins RapidDeploy Plugin 4.2	premières → 4.2	Pas de correctif indiqué

Autres CVE de Jenkins RapidDeploy Plugin

Les 4 CVE de Jenkins RapidDeploy Plugin →

CVE-2020-2170 Jenkins RapidDeploy Plugin 4.2 and earlier does not escape package names in the table of packages obtained from a remote… Non notée CVE-2019-16571 A missing permission check in Jenkins RapidDeploy Plugin 4.1 and earlier allows attackers with Overall/Read permission… Non notée CVE-2019-16570 A cross-site request forgery vulnerability in Jenkins RapidDeploy Plugin 4.1 and earlier allows attackers to connect… Non notée