Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2020-2139

jenkins-cobertura-plugin: arbitrary file write vulnerability

An arbitrary file write vulnerability in Jenkins Cobertura Plugin 1.15 and earlier allows attackers able to control the coverage report file contents to overwrite any file on the Jenkins master file system.

CVSS 3.1 · 6.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Jenkins
Products
Cobertura
CVE-2020-2138

jenkins-cobertura-plugin: XML parser not configured to prevent XXE attack

Jenkins Cobertura Plugin 1.15 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Jenkins
Products
Cobertura