CVE-2020-2284

Jenkins Liquibase Runner Plugin 1.4.5 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks

published September 23, 2020

CVSS
—
EPSS
1%
Percentile
58.6
In the wild
Unconfirmed
What it is

Jenkins Liquibase Runner Plugin 1.4.5 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00877 · 58.6th percentile
Published
2020-09-23T13:10Z
EPSS history
Timeline
  • 23 SEP 13:10Z
    Jenkins Liquibase Runner Plugin 1.4.5 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks
    cvelistv5