EUVD-2023-0324

Malicious code in bioql PyPI...

CVE-2023-24441

Jenkins MSTest Plugin 1.0.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

XML external entity vulnerability on agents in Jenkins MSTest Plugin

Jenkins MSTest Plugin 1.0.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

GHSA-3PPR-72X5-X67Q XML external entity vulnerability on agents in Jenkins MSTest Plugin

Jenkins MSTest Plugin 1.0.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2023-24441

Jenkins MSTest Plugin 1.0.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2023-24441

Jenkins MSTest Plugin 1.0.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

Xxe

Jenkins MSTest Plugin 1.0.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

Jenkins Plugin MSTest 代码问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

CVE-2023-24441

Jenkins MSTest Plugin 1.0.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2023-24441

Jenkins MSTest Plugin 1.0.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2023-24441

CVE-2023-24441 affects Jenkins MSTest Plugin 1.0.0 and earlier, where the XML parser is not configured to prevent XML external entity (XXE) attacks. The available connected sources confirm an XXE vulnerability in MSTest Plugin and do not specify a published patch version. Exploit specifics are no...

XXE vulnerability on agents in mstest

mstest 1.0.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to control the contents of the report file for the 'Publish MSTest test result report' post-build step to have agent processes parse a crafted file that uses external...

CVE-2023-24441: Improper Restriction of XML External Entity Reference

Jenkins MSTest Plugin 1.0.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

PT-2023-19601 · Jenkins · Jenkins Mstest Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins MSTest Plugin version 1.0.0 and earlier Description: The issue is related to the configuration of the XML parser, which does not prevent XML external entity XXE attacks. Recommendations: For Jenkins MSTest Plugin version 1.0.0 and...

CVE-2023-24441

Jenkins MSTest Plugin 1.0.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

org.jenkins-ci.plugins:continuum (1.0.1), org.jenkins-ci.plugins:flaky-test-handler (>=1.0.1, <=1.0.4) +2 more potentially affected by CVE-2022-45380 via org.jenkins-ci.plugins:junit (1.4)

org.jenkins-ci.plugins:junit MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - org.jenkins-ci.plugins:continuum 1.0.1 - org.jenkins-ci.plugins:flaky-test-handler =1.0.1, =0.12, =0.23...

org.jenkins-ci.plugins:continuum (1.0.1), org.jenkins-ci.plugins:flaky-test-handler (>=1.0.1, <=1.0.4) +2 more potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.4)

org.jenkins-ci.plugins:junit MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - org.jenkins-ci.plugins:continuum 1.0.1 - org.jenkins-ci.plugins:flaky-test-handler =1.0.1, =0.12, =0.23...