Xxe

2022-10-1916:15:00

PRIOn knowledge base

www.prio-n.com

jenkins

compuware

total test

plugin

xxe

vulnerability

xml parser

nvd

0.002 Low

EPSS

Percentile

52.5%

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

CPENameOperatorVersion
compuware_topaz_for_total_testle2.4.8

CPE	Name	Operator	Version
	compuware_topaz_for_total_test	le	2.4.8

References

www.openwall.com/lists/oss-security/2022/10/19/3

www.jenkins.io/security/advisory/2022-10-19/

0.002 Low

EPSS

Percentile

52.5%

Related for PRION:CVE-2022-43430