CVE-2020-2092

—

CVSS 3.1

8.8 high

EPSS

1%p71

Published

Jan 15, 2020 (Jan 15, 2020)

Modified

Jun 17, 2026

Description

Jenkins Robot Framework Plugin 2.0.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing users with Job/Configure to have Jenkins parse crafted XML documents.

Vendors: jenkins
Products: robot framework
Weakness: CWE-611
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.