Fedora 29 : checkstyle (2019-e4405b4c9f)

This update fixes security vulnerability - Checkstyle loads external DTDs by default. Upstream issue : https://github.com/checkstyle/checkstyle/issues/6474 https://github.com/checkstyle/checkstyle/issues/6478 References : https://checkstyle.org/releasenotes.htmlRelease8.18 Note that Tenable Netwo...

Fedora 28 : checkstyle (2019-a3f67e2364)

This update fixes security vulnerability - Checkstyle loads external DTDs by default. Upstream issue : https://github.com/checkstyle/checkstyle/issues/6474 https://github.com/checkstyle/checkstyle/issues/6478 References : https://checkstyle.org/releasenotes.htmlRelease8.18 Note that Tenable Netwo...

Moderate severity vulnerability that affects com.puppycrawl.tools:checkstyle

Checkstyle prior to 8.18 loads external DTDs by default, which can potentially lead to denial of service attacks or the leaking of confidential information...

GHSA-GP32-7H29-RPXM Moderate severity vulnerability that affects com.puppycrawl.tools:checkstyle

Checkstyle prior to 8.18 loads external DTDs by default, which can potentially lead to denial of service attacks or the leaking of confidential information...

XML External Entity (XXE)

checkstyle is vulnerable to XML External Entity XXE. The vulnerability exists because it allows loading of external DTDs as a default feature, allowing an attacker to call a malicious external DTD...

CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default...

Default credentials

Checkstyle before 8.18 loads external DTDs by default...

CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default...

CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default...

UBUNTU-CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default...

DEBIAN-CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default...

CVE-2019-9658

CVE-2019-9658 affects Checkstyle (com.puppycrawl.tools:checkstyle). Multiple connected sources confirm that versions prior to 8.29 are vulnerable to XML External Entity (XXE) Injection due to an incomplete fix for CVE-2019-9658. The root cause is an incomplete/partial mitigation in the earlier fi...

CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default...

CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default...

CVE-2019-9658: Improper Restriction of XML External Entity Reference

Checkstyle before 8.18 loads external DTDs by default...

CloudBees Jenkins Checkstyle plugin XML external entity injection vulnerability

CloudBees Jenkins is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Checkstyle Plugin is used in one of...

CVE-2018-1000009

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

CVE-2018-1000009

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

Server side request forgery (ssrf)

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

CVE-2018-1000009

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...