CVE-2020-2115

2020-02-1215:15:13

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

Jenkins NUnit Plugin 0.25 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks.

CPENameOperatorVersion
nunit-plugineqnunit-0.12
nunit-plugineqnunit-0.25
nunit-plugineqnunit-0.13
nunit-plugineqnunit-0.19
nunit-plugineqnunit-0.24
nunit-plugineqnunit-0.15
nunit-plugineqnunit-0.14
nunit-plugineqnunit-0.20
nunit-plugineqnunit-0.23
nunit-plugineqnunit-0.16

Name	Operator	Version
nunit-plugin	eq	nunit-0.12
nunit-plugin	eq	nunit-0.25
nunit-plugin	eq	nunit-0.13
nunit-plugin	eq	nunit-0.19
nunit-plugin	eq	nunit-0.24
nunit-plugin	eq	nunit-0.15
nunit-plugin	eq	nunit-0.14
nunit-plugin	eq	nunit-0.20
nunit-plugin	eq	nunit-0.23
nunit-plugin	eq	nunit-0.16