Maven/org.jenkins-ci.plugins:TestComplete CVE-2023-24443: critical 9.8, EPSS 1.21%
XML Entity Expansion in Jenkins TestComplete support Plugin
Action: Upgrade org.jenkins-ci.plugins:TestComplete to 2.9 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.9 | - |
Fixed versions
| 2.9 |
Sources
- osv: GHSA-g5mj-c26g-vmpm
- https://nvd.nist.gov/vuln/detail/CVE-2023-24443
- https://github.com/jenkinsci/testcomplete-plugin/commit/971003ea578a090ed9a5b9487acb9d2aa93645d3
- https://github.com/jenkinsci/testcomplete-plugin/commit/cfb0fc3cd807cb72c24424cef98ce39710f2e5fb
- https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2741
CVE-2023-24443 · published · modified · JSON