CVE-2020-2315

Summary

Jenkins Visualworks Store Plugin 1.1.3 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected Software

VendorProductVersion RangeStatus
Jenkins projectJenkins Visualworks Store Pluginunspecified <= 1.1.3affected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References