← CVE Intelligence

CVE-2025-64134

Jenkins Project / Jenkins JDepend Plugin PUBLISHED

Description (CNA)

Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected (CNA)

Vendor / productVersions
Jenkins Project / Jenkins JDepend Pluginaffected 0 through 1.3.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.