CVE-2020-2172 Jenkins Code Coverage API Plugin 1.1.4 and earlier does not configure its XML parser to prevent XML external entity…

Description

Jenkins Code Coverage API Plugin 1.1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Jenkins Code Coverage API Plugin 1.1	premières → 1.1.4	Pas de correctif indiqué

Autres CVE de Jenkins Code Coverage API Plugin

Les 3 CVE de Jenkins Code Coverage API Plugin →

CVE-2021-21677 Jenkins Code Coverage API Plugin 1.4.0 and earlier does not apply Jenkins JEP-200 deserialization protection to Java… Non notée CVE-2020-2106 Jenkins Code Coverage API Plugin 1.1.2 and earlier does not escape the filename of the coverage report used in its view,… Non notée