Skip to content
OpenAdvisories
High · 7.5 CVE-2022-43430 EUVD-2022-7167GHSA-vhwv-8897-jm7q

XXE vulnerability in Jenkins Compuware Topaz for Total Test Plugin

Published Oct 19, 2022 · Updated May 8, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Compuware Topaz for Total Test Plugin Package: com.compuware.jenkins:compuware-topaz-for-total-test Category: Web / CMS Ecosystem: Maven

Description

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Compuware Topaz for Total Test Plugin unspecified – ≤ 2.4.8 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven com.compuware.jenkins:compuware-topaz-for-total-test < 2.4.9 2.4.9 GHSA-vhwv-8897-jm7q

Advisories 1

References