Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-24443 EUVD-2023-0467GHSA-g5mj-c26g-vmpm

XML Entity Expansion in Jenkins TestComplete support Plugin

Published Jan 24, 2023 · Updated Apr 2, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins TestComplete support Plugin Package: org.jenkins-ci.plugins:TestComplete Category: Web / CMS Ecosystem: Maven

Description

Jenkins TestComplete support Plugin 2.8.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

VendorProductAffectedFixed
Jenkins Project Jenkins TestComplete support Plugin unspecified – ≤ 2.8.1 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:TestComplete < 2.9 2.9 GHSA-g5mj-c26g-vmpm

Advisories 1

References