Description
Hudson (aka org.jvnet.hudson.main:hudson-core) before 3.3.2 allows XXE attacks.
Remediation
References
https://github.com/advisories/GHSA-j3h2-8mf8-j5r2
https://security.snyk.io/vuln/SNYK-JAVA-ORGJVNETHUDSONMAIN-31221
https://wiki.eclipse.org/Hudson-ci/alerts/CVE-2015-8031
Related Vulnerabilities
CVE-2019-10754 Vulnerability in maven package org.apereo.cas:cas-server-support-simple-mfa
CVE-2021-39150 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2022-2900 Vulnerability in npm package parse-url
CVE-2022-32533 Vulnerability in maven package org.apache.portals.jetspeed-2:jetspeed
CVE-2021-21165 Vulnerability in maven package org.webjars.npm:electron