org.jvnet.hudson.plugins:checkstyle@2.1 vulnerabilities

  • latest version

    3.12

  • latest non vulnerable version

  • first published

    16 years ago

  • latest version published

    14 years ago

  • licenses detected

  • package manager

  • Direct Vulnerabilities

    Known vulnerabilities in the org.jvnet.hudson.plugins:checkstyle package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    XML External Entity (XXE) Injection

    org.jvnet.hudson.plugins:checkstyle collects the Checkstyle analysis results of the project modules and visualizes the found warnings.

    Affected versions of this package are vulnerable to XML External Entity (XXE) Injection in files it parses as part of the build process. It allows attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks.

    How to fix XML External Entity (XXE) Injection?

    Upgrade org.jvnet.hudson.plugins:checkstyle to version 3.5 or higher.

    [,3.5)