CVE-2020-2298

2020-10-0813:15:12

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

JSON

Jenkins Nerrvana Plugin 1.02.06 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

CPENameOperatorVersion
nerrvana-plugineqnerrvana-plugin-1.02.04
nerrvana-plugineqnerrvana-plugin-1.02.05
nerrvana-plugineqnerrvana-plugin-1.02.06
nerrvana-plugineqnerrvana-plugin-1.02.03
nerrvana-plugineqnerrvana-plugin-1.02.01
nerrvana-plugineqnerrvana-plugin-1.02r
nerrvana-plugineqnerrvana-plugin-1.02
nerrvana-plugineqnerrvana-plugin-1.02.02

Name	Operator	Version
nerrvana-plugin	eq	nerrvana-plugin-1.02.04
nerrvana-plugin	eq	nerrvana-plugin-1.02.05
nerrvana-plugin	eq	nerrvana-plugin-1.02.06
nerrvana-plugin	eq	nerrvana-plugin-1.02.03
nerrvana-plugin	eq	nerrvana-plugin-1.02.01
nerrvana-plugin	eq	nerrvana-plugin-1.02r
nerrvana-plugin	eq	nerrvana-plugin-1.02
nerrvana-plugin	eq	nerrvana-plugin-1.02.02