Jenkins Project Jenkins Cobertura Plugin
2 CVEs affecting Jenkins Project Jenkins Cobertura Plugin. Latest disclosed: 2020-03-09. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-2138 | High | 7.1 | 2020-03-09 | Jenkins Cobertura Plugin 1.15 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. |
CVE-2020-2139 | Medium | 6.5 | 2020-03-09 | An arbitrary file write vulnerability in Jenkins Cobertura Plugin 1.15 and earlier allows attackers able to control the coverage report file contents to overwr… |