Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-24441 EUVD-2023-0324GHSA-3ppr-72x5-x67q

XML external entity vulnerability on agents in Jenkins MSTest Plugin

Published Jan 24, 2023 · Updated Apr 2, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins MSTest Plugin Package: org.jvnet.hudson.plugins:mstest Category: Web / CMS Ecosystem: Maven

Description

Jenkins MSTest Plugin 1.0.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

VendorProductAffectedFixed
Jenkins Project Jenkins MSTest Plugin unspecified – ≤ 1.0.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jvnet.hudson.plugins:mstest < 1.0.1 1.0.1 GHSA-3ppr-72x5-x67q

Advisories 1

References