High · 7.6 CVE-2020-2171 EUVD-2022-3921GHSA-g7w4-r4mg-gvhx

XXE vulnerability in Jenkins RapidDeploy Plugin

Published Mar 25, 2020 · Updated Aug 4, 2024 · Assigned by jenkins

Description

Jenkins RapidDeploy Plugin 4.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Vendor	Product	Affected	Fixed
Jenkins project	Jenkins RapidDeploy Plugin	unspecified – ≤ 4.2	—

Ecosystem	Package	Affected	Fixed	Record
Maven	org.jenkins-ci.plugins:rapiddeploy-jenkins	< 4.2.1	4.2.1	GHSA-g7w4-r4mg-gvhx