CVE-2022-43414

CVE-2022-43414 concerns the Jenkins NUnit Plugin (versions 0.27 and earlier). The vulnerability arises from an agent-to-controller message that parses files inside a user-specified directory as test results, enabling attackers who can control agent processes to access test results from files loca...

CVE-2020-2115

CVE-2020-2115 affects Jenkins NUnit Plugin 0.25 and earlier. The root cause is that the XML parser is not configured to prevent XML External Entity (XXE) attacks, allowing an attacker who controls input files for the post-build step to have Jenkins parse crafted XML and potentially leak secrets, ...