Jenkins Cobertura Plugin (Jenkins Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2020-03-09. Vendor: Jenkins Project.

CVEs of Jenkins Cobertura Plugin

• CVE-2020-2139 - CVSS 6.5 (medium), 2020-03-09: An arbitrary file write vulnerability in Jenkins Cobertura Plugin 1.15 and earlier allows attackers able to control the coverage report file contents to…
• CVE-2020-2138 - CVSS 7.1 (high), 2020-03-09: Jenkins Cobertura Plugin 1.15 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.