CVE-2020-2315 — Jenkins project / Jenkins Visualworks Store Plugin

CVE-2020-2315

Jenkins project / Jenkins Visualworks Store Plugin PUBLISHED

Description (CNA)

Jenkins Visualworks Store Plugin 1.1.3 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Vendor / product	Versions
Jenkins project / Jenkins Visualworks Store Plugin	affected unspecified through 1.1.3

No CWE identifiers supplied.

CVE

No English description supplied.