Skip to content
OpenAdvisories
High · 7.1 CVE-2020-2178 EUVD-2022-2042GHSA-2rh4-xgmq-63jp

XXE vulnerability in Jenkins Parasoft Findings Plugin

Published Apr 16, 2020 · Updated Aug 4, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Parasoft Findings Plugin Package: com.parasoft:parasoft-findings Category: Web / CMS Ecosystem: Maven

Description

Jenkins Parasoft Findings Plugin 10.4.3 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Parasoft Findings Plugin unspecified – ≤ 10.4.3 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven com.parasoft:parasoft-findings < 10.4.4 10.4.4 GHSA-2rh4-xgmq-63jp

References