GHSA-j3h2-8mf8-j5r2CriticalCVSS 9.8

Hudson XML API susceptible to External Entity Injection Vunerability prior to v3.3.2

Published
July 15, 2022
Last Modified
January 27, 2023

🔗 CVE IDs covered (1)

CVE-2015-8031 →

📋 Description

In versions prior to 3.3.2, Hudson exhibits a flaw in its XML API processing that can allow access to potentially sensitive information on the filesystem of the Hudson master server.

🎯 Affected products1

  • maven/org.jvnet.hudson.main:hudson-core:< 3.3.2

🔗 References (4)