CVE-2020-2120

2020-02-1215:15:13

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.8%

JSON

Jenkins FitNesse Plugin 1.30 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks.

CPENameOperatorVersion
fitnesse-plugineqfitnesse-1.30
fitnesse-plugineqfitnesse-1.11
fitnesse-plugineqfitnesse-1.25
fitnesse-plugineqfitnesse-1.14
fitnesse-plugineqfitnesse-1.27
fitnesse-plugineqfitnesse-1.12
fitnesse-plugineqfitnesse-1.6
fitnesse-plugineqfitnesse-1.15
fitnesse-plugineqfitnesse-1.10
fitnesse-plugineqfitnesse-1.16

Name	Operator	Version
fitnesse-plugin	eq	fitnesse-1.30
fitnesse-plugin	eq	fitnesse-1.11
fitnesse-plugin	eq	fitnesse-1.25
fitnesse-plugin	eq	fitnesse-1.14
fitnesse-plugin	eq	fitnesse-1.27
fitnesse-plugin	eq	fitnesse-1.12
fitnesse-plugin	eq	fitnesse-1.6
fitnesse-plugin	eq	fitnesse-1.15
fitnesse-plugin	eq	fitnesse-1.10
fitnesse-plugin	eq	fitnesse-1.16