XML External Entity (XXE) Vulnerability in Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and Earlier

XML External Entity (XXE) Vulnerability in Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and Earlier

CVE-2022-43430 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Learn more about our External Network Penetration Testing.