Lucene search

CVE-2020-2284

🗓️ 23 Sep 2020 14:13:15Reported by jenkinsType

Jenkins Liquibase Runner Plugin 1.4.5 and earlier XML parser XXE vulnerabilit

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2020-2284	23 Sep 202013:10	–	cvelist
OSV	XXE vulnerability in Jenkins Liquibase Runner Plugin	24 May 202217:29	–	osv
OSV	CVE-2020-2284	23 Sep 202014:15	–	osv
Prion	Xxe	23 Sep 202014:15	–	prion
NVD	CVE-2020-2284	23 Sep 202014:15	–	nvd
Github Security Blog	XXE vulnerability in Jenkins Liquibase Runner Plugin	24 May 202217:29	–	github

Nvd

Node

jenkins liquibase_runnerRange≤1.4.5jenkins

[
  {
    "product": "Jenkins Liquibase Runner Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "lessThanOrEqual": "1.4.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2020/09/23/1
jenkins	www.jenkins.io/security/advisory/2020-09-23/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Sep 2020 14:15Current

6.8Medium risk

Vulners AI Score6.8

CVSS25.5

CVSS37.1

EPSS0.00066

CWE-611