Red Hat Security Advisory

RHSA-2021:0282

OpenShift Container Platform 4.4.33 packages and security update

Released 2021-02-03 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2020-02182 CVE-2020-2305 · GHSA-x58r-wxc3-7pqr

LOW 32

Jenkins Mercurial Plugin 2.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01494 Published 2020-11-04 Fixed in 2.10.1, 2.9.1 +2 CWE-611

TI-2020-02181 CVE-2020-2304 · GHSA-vp5f-8jgw-j53c

LOW 32

Jenkins Subversion Plugin 2.13.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01525 Published 2020-11-04 Fixed in 2.13.2 CWE-611