CVE-2022-43430

CVE-2022-43430 affects Jenkins Compuware Topaz for Total Test Plugin versions 2.4.8 and earlier. Root cause: the plugin’s XML parser is not configured to prevent XML External Entity (XXE) attacks. Impact: a crafted XML input in the Topaz Execute Total Test scenarios could allow extraction of secr...

CVE-2022-43429

CVE-2022-43429 affects Jenkins with the Compuware Topaz for Total Test Plugin (versions ≤ 2.4.8). The issue is an agent/controller message that does not limit where it can be executed, enabling attackers who can control agent processes to read arbitrary files on the Jenkins controller file system...