CVE-2020-2245

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-2245
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-2245.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-2245
Aliases
Published
2020-09-01T14:15:13.050Z
Modified
2026-07-08T17:56:29.672940Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N CVSS Calculator
Summary
[none]
Details

Jenkins Valgrind Plugin 0.28 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

References

Affected packages

Git / github.com/jenkinsci/valgrind-plugin

Affected ranges

Type
GIT
Repo
https://github.com/jenkinsci/valgrind-plugin
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
05c3346ce8a7c6dfb389cda556c29245ff14a033
Database specific 
{
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.28"
        }
    ],
    "cpe": "cpe:2.3:a:jenkins:valgrind:*:*:*:*:*:jenkins:*:*"
}

Affected versions

valgrind-0.*
valgrind-0.1
valgrind-0.10
valgrind-0.11
valgrind-0.12
valgrind-0.13
valgrind-0.14
valgrind-0.15
valgrind-0.16
valgrind-0.17
valgrind-0.18
valgrind-0.19
valgrind-0.20
valgrind-0.21
valgrind-0.22
valgrind-0.23
valgrind-0.24
valgrind-0.24a
valgrind-0.25
valgrind-0.25a
valgrind-0.25b
valgrind-0.26
valgrind-0.27
valgrind-0.28
valgrind-0.3
valgrind-0.4
valgrind-0.5
valgrind-0.6
valgrind-0.7
valgrind-0.8

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-2245.json"