Jenkins Findbugs
2 CVEs affecting Jenkins Findbugs. Latest disclosed: 2020-11-04. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-1000011 | High | 8.8 | 2018-01-23 | Jenkins FindBugs Plugin 4.71 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissi… |
CVE-2020-2317 | Medium | 5.4 | 2020-11-04 | Jenkins FindBugs Plugin 5.0.0 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability ex… |