Skip to content
OpenAdvisories
High · 7.1 CVE-2020-2245 EUVD-2022-5840GHSA-xq2q-8hxc-7jr2

XXE vulnerability in Jenkins Valgrind Plugin

Published Sep 1, 2020 · Updated Aug 4, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Valgrind Plugin Package: org.jenkins-ci.plugins:valgrind Category: Web / CMS Ecosystem: Maven

Description

Jenkins Valgrind Plugin 0.28 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Valgrind Plugin unspecified – ≤ 0.28 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:valgrind <= 0.28 — GHSA-xq2q-8hxc-7jr2

References