exploitDog

CVE-2015-8031

Опубликовано: 18 июл. 2022

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

Hudson (aka org.jvnet.hudson.main:hudson-core) before 3.3.2 allows XXE attacks.

Ссылки

https://github.com/advisories/GHSA-j3h2-8mf8-j5r2
Exploit
Third Party Advisory
https://security.snyk.io/vuln/SNYK-JAVA-ORGJVNETHUDSONMAIN-31221
Exploit
Third Party Advisory
https://wiki.eclipse.org/Hudson-ci/alerts/CVE-2015-8031
Vendor Advisory
https://github.com/advisories/GHSA-j3h2-8mf8-j5r2
Exploit
Third Party Advisory
https://security.snyk.io/vuln/SNYK-JAVA-ORGJVNETHUDSONMAIN-31221
Exploit
Third Party Advisory
https://wiki.eclipse.org/Hudson-ci/alerts/CVE-2015-8031
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:eclipse:hudson:*:*:*:*:*:*:*:*

Версия до 3.2.2 (исключая)

EPSS

Процентиль: 69%

0.0061

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-611

Связанные уязвимости

GHSA-j3h2-8mf8-j5r2

CVSS3: 9.8

github

больше 3 лет назад

Hudson XML API susceptible to External Entity Injection Vunerability prior to v3.3.2

EPSS

Процентиль: 69%

0.0061

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-611