medium6.5
CVE-2020-2298
Jenkins Nerrvana Plugin 1.02.06 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Impact
Jenkins Nerrvana Plugin 1.02.06 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Nerrvana | through 1.02.06 |