CVE-2015-8031

Hudson aka org.jvnet.hudson.main:hudson-core before 3.3.2 allows XXE attacks...

CVE-2015-8031

Hudson aka org.jvnet.hudson.main:hudson-core before 3.3.2 allows XXE attacks...

CVE-2015-8031

CVE-2015-8031 affects Hudson (org.jvnet.hudson.main:hudson-core) before 3.3.2, where a flaw in the XML API processing enables XXE/External Entity Injection, potentially exposing sensitive information from the Hudson master filesystem. Multiple sources (NVD, Red Hat, GHSA, CVE pages) corroborate t...

org.jvnet.hudson.main:hudson-war (1.60) potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.60)

org.jvnet.hudson.main:hudson-core MAVEN version 1.60 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.60 Source cves: CVE-2015-8031 Source advisory:...

org.jvnet.hudson.main:hudson-war (1.65) potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.65)

org.jvnet.hudson.main:hudson-core MAVEN version 1.65 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.65 Source cves: CVE-2015-8031 Source advisory:...

org.jvnet.hudson.main:hudson-war (1.68) potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.68)

org.jvnet.hudson.main:hudson-core MAVEN version 1.68 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.68 Source cves: CVE-2015-8031 Source advisory:...

org.jvnet.hudson.main:hudson-war (1.70) potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.70)

org.jvnet.hudson.main:hudson-core MAVEN version 1.70 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.70 Source cves: CVE-2015-8031 Source advisory:...

org.jvnet.hudson.main:hudson-war (1.74) potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.74)

org.jvnet.hudson.main:hudson-core MAVEN version 1.74 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.74 Source cves: CVE-2015-8031 Source advisory:...

org.jvnet.hudson.main:hudson-war (1.77) potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.77)

org.jvnet.hudson.main:hudson-core MAVEN version 1.77 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.77 Source cves: CVE-2015-8031 Source advisory:...

org.jvnet.hudson.main:hudson-war (1.80) potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.80)

org.jvnet.hudson.main:hudson-core MAVEN version 1.80 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.80 Source cves: CVE-2015-8031 Source advisory:...

org.jvnet.hudson.main:hudson-war (1.83) potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.83)

org.jvnet.hudson.main:hudson-core MAVEN version 1.83 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.83 Source cves: CVE-2015-8031 Source advisory:...

org.jvnet.hudson.main:hudson-war (1.100) potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.100)

org.jvnet.hudson.main:hudson-core MAVEN version 1.100 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.100 Source cves: CVE-2015-8031 Source advisory:...

org.jvnet.hudson.main:hudson-war (1.119) potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.119)

org.jvnet.hudson.main:hudson-core MAVEN version 1.119 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.119 Source cves: CVE-2015-8031 Source advisory:...

org.jvnet.hudson.main:hudson-war (1.120) potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.120)

org.jvnet.hudson.main:hudson-core MAVEN version 1.120 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.120 Source cves: CVE-2015-8031 Source advisory:...

org.jvnet.hudson.main:hudson-war (1.124), org.jvnet.hudson.plugins:findbugs (1.1) +1 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.124)

org.jvnet.hudson.main:hudson-core MAVEN version 1.124 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.124 - org.jvnet.hudson.plugins:findbugs 1.1 -...

org.jvnet.hudson.main:hudson-war (1.125) potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.125)

org.jvnet.hudson.main:hudson-core MAVEN version 1.125 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.125 Source cves: CVE-2015-8031 Source advisory:...

org.jvnet.hudson.main:hudson-war (1.126), org.jvnet.hudson.plugins:plugin (1.126) potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.126)

org.jvnet.hudson.main:hudson-core MAVEN version 1.126 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.126 - org.jvnet.hudson.plugins:plugin 1.126 Source cves:...

org.jvnet.hudson.main:hudson-war (1.127), org.jvnet.hudson.plugins:jira (1.4) +1 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.127)

org.jvnet.hudson.main:hudson-core MAVEN version 1.127 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.127 - org.jvnet.hudson.plugins:jira 1.4 -...

org.jvnet.hudson.main:hudson-war (1.129), org.jvnet.hudson.plugins:plugin (1.129) potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.129)

org.jvnet.hudson.main:hudson-core MAVEN version 1.129 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.129 - org.jvnet.hudson.plugins:plugin 1.129 Source cves:...

org.jvnet.hudson.main:hudson-war (1.130), org.jvnet.hudson.plugins:jira (1.5) +1 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.130)

org.jvnet.hudson.main:hudson-core MAVEN version 1.130 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.130 - org.jvnet.hudson.plugins:jira 1.5 -...