CVE-2020-2305

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.5%

exploitation probability

1.5%top 27% of all CVEs

observed exploitation

nono source reports it

Jenkins Mercurial Plugin 2.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

References