CVE-2020-2092 in Robot Framework Plugin

Resumen

por MITRE

Jenkins Robot Framework Plugin 2.0.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing users with Job/Configure to have Jenkins parse crafted XML documents.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservar: 2019-12-05
• Moderación: aceptado
• Artículo: VDB-149054
• CPE: listo
• CWE: CWE-611 (confirmado)
• CVSS: 8.8 (NVD)
• EPSS: 0.01382
• KEV: no
• Actividades: muy bajo
• Sector: Telecommunication

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-2092
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-2092
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-2092/