Moderate severity vulnerability that affects com.puppycrawl.tools:checkstyle

Checkstyle prior to 8.18 loads external DTDs by default, which can potentially lead to denial of service attacks or the leaking of confidential information...

XML External Entity (XXE)

checkstyle is vulnerable to XML External Entity XXE. The vulnerability exists because it allows loading of external DTDs as a default feature, allowing an attacker to call a malicious external DTD...

Default credentials

Checkstyle before 8.18 loads external DTDs by default...

CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default...

CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default...

DEBIAN-CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default...

UBUNTU-CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default...

CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default...

CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default...

CVE-2019-9658

CVE-2019-9658 affects Checkstyle (com.puppycrawl.tools:checkstyle). Multiple connected sources confirm that versions prior to 8.29 are vulnerable to XML External Entity (XXE) Injection due to an incomplete fix for CVE-2019-9658. The root cause is an incomplete/partial mitigation in the earlier fi...

CVE-2019-9658

Checkstyle before 8.18 loads external DTDs by default...

CloudBees Jenkins Checkstyle plugin XML external entity injection vulnerability

CloudBees Jenkins is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Checkstyle Plugin is used in one of...

CVE-2018-1000009

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

Server side request forgery (ssrf)

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

CVE-2018-1000009

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

CVE-2018-1000009

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

CVE-2018-1000009

CVE-2018-1000009 concerns the Jenkins Checkstyle Plugin (versions 3.49 and earlier) where an XML External Entity (XXE) vulnerability exists in how it parses build-related files. The root cause is processing XML with external entity references, enabling attackers with Jenkins user permissions to e...

CVE-2018-1000009

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...