org.jvnet.hudson.main:hudson-test-harness (1.325), org.jvnet.hudson.main:hudson-war (1.325) +5 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.325)

org.jvnet.hudson.main:hudson-core MAVEN version 1.325 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.325 - org.jvnet.hudson.main:hudson-war 1.325 -...

XXE vulnerability in covcomplplot

covcomplplot 1.1.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to control the input files for the 'Public Coverage / Complexity Scatter Plot' post-build step to have Jenkins parse a crafted file that uses external entities f...

Stored XSS vulnerability in covcomplplot

covcomplplot 1.1.1 and earlier does not escape the method information in tooltips. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers able to provide report files to the 'Publish Coverage / Complexity Scatter Plot' post-build step. As of publication of this...