CVE-2020-2305

Jenkins Mercurial Plugin 2.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks

published November 4, 2020

CVSS
—
EPSS
1%
Percentile
74.0
In the wild
Unconfirmed
What it is

Jenkins Mercurial Plugin 2.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01494 · 74.0th percentile
Published
2020-11-04T14:35Z
EPSS history
Timeline
  • 04 NOV 14:35Z
    Jenkins Mercurial Plugin 2.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks
    cvelistv5