Description
Hudson (aka org.jvnet.hudson.main:hudson-core) before 3.3.2 allows XXE attacks.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.jvnet.hudson.main:hudson-core | < 3.3.2 | 3.3.2 | GHSA-j3h2-8mf8-j5r2 |
Critical · 9.8
CVE-2015-8031
EUVD-2022-6359GHSA-j3h2-8mf8-j5r2
Hudson XML API susceptible to External Entity Injection Vunerability prior to v3.3.2
Published Jul 18, 2022 · Updated Aug 6, 2024 · Assigned by mitre