3.12
16 years ago
14 years ago
Known vulnerabilities in the org.jvnet.hudson.plugins:checkstyle package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for freeVulnerability | Vulnerable Version |
---|---|
org.jvnet.hudson.plugins:checkstyle collects the Checkstyle analysis results of the project modules and visualizes the found warnings. Affected versions of this package are vulnerable to XML External Entity (XXE) Injection in files it parses as part of the build process. It allows attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks. How to fix XML External Entity (XXE) Injection? Upgrade | [,3.5) |