Description
Hudson (aka org.jvnet.hudson.main:hudson-core) before 3.3.2 allows XXE attacks.
Remediation
References
https://github.com/advisories/GHSA-j3h2-8mf8-j5r2
https://security.snyk.io/vuln/SNYK-JAVA-ORGJVNETHUDSONMAIN-31221
https://wiki.eclipse.org/Hudson-ci/alerts/CVE-2015-8031
Related Vulnerabilities
CVE-2020-7777 Vulnerability in npm package jsen
CVE-2020-24855 Vulnerability in npm package @easy-team/easywebpack-cli
CVE-2022-38900 Vulnerability in npm package decode-uri-component
CVE-2023-44487 Vulnerability in maven package org.eclipse.jetty.http2:http2-common
CVE-2022-36033 Vulnerability in maven package org.jsoup:jsoup