CVE-2020-2324

Description

Jenkins CVS Plugin 2.16 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Base Score

7.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.147

Vulnerability	OS Platform
Vulnerabilities CVE-2020-2324 are fixed in Jenkins - cvs 2.17	Windows
Vulnerabilities CVE-2020-2324 are fixed in Jenkins - cvs for Linux 2.17	Linux

No records found