Launchpad.net

Launchpad CVE tracker

CVE 2020-2324

Jenkins CVS Plugin 2.16 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

See the

CVE page on Mitre.org for more details.

References

MISC: http://www.openwall.co...
MISC: https://www.jenkins.io...