CVE-2020-2262

CVE-2020-2262 affects Jenkins Android Lint Plugin versions 2.6 and earlier. The issue is that the plugin does not escape the annotation message in tooltips, causing a stored XSS vulnerability when an attacker can provide report files to the plugin’s post-build step. Impact is stored XSS in Jenkin...

CVE-2018-1000055

XXE vulnerability (CVE-2018-1000055) affecting Jenkins Android Lint Plugin 2.5 and earlier. The plugin processes XML in build files, allowing an authenticated Jenkins user to trigger XML External Entity processing and potentially exfiltrate secrets from the Jenkins master, perform server-side req...