ZeroHour

CVE-2020-2247

CVSS 3.1
6.5 medium
EPSS
<1%p55
Published
()
Modified
Description

Jenkins Klocwork Analysis Plugin 2020.2.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Vendors
jenkins
Products
klocwork analysis
Weakness
CWE-611
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

In the news

No ingested article mentions this CVE yet.