CVE-2020-2178

CVE-2020-2178: vulnerability in Jenkins Parasoft Findings Plugin

Published · Updated

Follow this CVE+ Monitor Jenkins Parasoft Findings Plugin+ Monitor com.parasoft:parasoft-findings

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.9%
Jenkins Parasoft Findings Plugin 10.4.3 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected products
Jenkins project · Jenkins Parasoft Findings Plugin