Skip to content
OpenAdvisories
High · 7.6 CVE-2020-2115 EUVD-2022-5862GHSA-xvhf-q744-5xm8

XXE vulnerability in NUnit Plugin

Published Feb 12, 2020 · Updated Aug 4, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins NUnit Plugin Package: org.jenkins-ci.plugins:nunit Category: Web / CMS Ecosystem: Maven

Description

Jenkins NUnit Plugin 0.25 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins NUnit Plugin unspecified – ≤ 0.25 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:nunit < 0.26 0.26 GHSA-xvhf-q744-5xm8

References