CVE-2020-2172

CVE-2020-2172: vulnerability in Jenkins Code Coverage API Plugin

Published · Updated

Follow this CVE+ Monitor Jenkins Code Coverage API Plugin+ Monitor io.jenkins.plugins:code-coverage-api

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.1%
Jenkins Code Coverage API Plugin 1.1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected products
Jenkins project · Jenkins Code Coverage API Plugin
Related CVEs — Jenkins Code Coverage API Plugin

In the same product, most dangerous first.

CVE-2021-21677—CVE-2021-21677EPSS 2.2%CVE-2020-2106—CVE-2020-2106EPSS 0.7%