CVE-2020-2245 Jenkins Valgrind Plugin 0.28 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks

Description

Jenkins Valgrind Plugin 0.28 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Jenkins Valgrind Plugin 0.28	premières → 0.28	Pas de correctif indiqué

Autres CVE de Jenkins Valgrind Plugin

Les 2 CVE de Jenkins Valgrind Plugin →

CVE-2020-2246 Jenkins Valgrind Plugin 0.28 and earlier does not escape content in Valgrind XML reports, resulting in a stored… Non notée