Package · Maven

org.jenkins-ci.plugins:valgrind

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 7.1

CVE-2020-2245

XXE vulnerability in Jenkins Valgrind Plugin

Jenkins Valgrind Plugin 0.28 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Jenkins Project Jenkins Valgrind Plugin org.jenkins-ci.plugins:valgrind Web / CMS Maven

Sep 1, 2020
High 8.0

CVE-2020-2246

Stored XSS vulnerability in Jenkins Valgrind Plugin

Jenkins Valgrind Plugin 0.28 and earlier does not escape content in Valgrind XML reports, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control Valgrind XML report contents.

Jenkins Project Jenkins Valgrind Plugin org.jenkins-ci.plugins:valgrind Web / CMS Maven

Sep 1, 2020