← CVE Intelligence

CVE-2020-2305

Jenkins project / Jenkins Mercurial Plugin PUBLISHED

Description (CNA)

Jenkins Mercurial Plugin 2.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected (CNA)

Vendor / productVersions
Jenkins project / Jenkins Mercurial Pluginaffected unspecified through 2.11; unaffected 2.10.1; unaffected 2.9.1; unaffected 2.8.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.