CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2020/03/09 4:15 p.m.•22 views

CVE-2020-2144

Jenkins Rundeck Plugin 3.6.6 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

7.1CVSS6.7AI score

Exploits0References2

Cvelist•added 2020/03/09 3:1 p.m.•31 views

CVE-2020-2144

Jenkins Rundeck Plugin 3.6.6 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

6.9AI score0.01081EPSS

Exploits0References2

CVE•added 2020/03/09 3:1 p.m.•90 views

CVE-2020-2144

Summary: CVE-2020-2144 affects the Jenkins Rundeck Plugin, version 3.6.6 and earlier. The underlying issue is that the plugin’s XML parser does not disable XML External Entity (XXE) processing, which can enable a user with read access to submit crafted XML that leverages external entities, potent...

7.1CVSS6.8AI score0.01081EPSS

Exploits0References2Affected Software1