CVE-2020-2247

2020-09-0114:15:13

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.2%

JSON

Jenkins Klocwork Analysis Plugin 2020.2.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

CPENameOperatorVersion
klocwork-plugineqklocwork-1.12
klocwork-plugineqklocwork-2.2.3
klocwork-plugineqklocwork-2.4.1
klocwork-plugineqklocwork-2.0
klocwork-plugineqklocwork-1.18
klocwork-plugineqklocwork-2.3.2
klocwork-plugineqklocwork-1.8.1
klocwork-plugineqklocwork-2.2
klocwork-plugineqklocwork-2.4.9
klocwork-plugineqklocwork-1.7

Name	Operator	Version
klocwork-plugin	eq	klocwork-1.12
klocwork-plugin	eq	klocwork-2.2.3
klocwork-plugin	eq	klocwork-2.4.1
klocwork-plugin	eq	klocwork-2.0
klocwork-plugin	eq	klocwork-1.18
klocwork-plugin	eq	klocwork-2.3.2
klocwork-plugin	eq	klocwork-1.8.1
klocwork-plugin	eq	klocwork-2.2
klocwork-plugin	eq	klocwork-2.4.9
klocwork-plugin	eq	klocwork-1.7