org.jvnet.hudson.plugins:android-lint

2 results · Feed

• High 8.0
  CVE-2020-2262

  Stored XSS vulnerability in android-lint Plugin

  Jenkins Android Lint Plugin 2.6 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide report files to the plugin's post-build step.

  Jenkins Project Jenkins Android Lint Plugin org.jvnet.hudson.plugins:android-lint Android Web / CMS Maven
  Sep 16, 2020
• High 8.3
  CVE-2018-1000055

  XXE vulnerability in Jenkins Android Lint Plugin

  Jenkins Android Lint Plugin 2.5 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, o…

  org.jvnet.hudson.plugins:android-lint Maven
  Feb 9, 2018