Critical severityNVD Advisory· Published Jan 24, 2023· Updated Apr 2, 2025
CVE-2023-24443
CVE-2023-24443
Description
Jenkins TestComplete support Plugin 2.8.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.jenkins-ci.plugins:TestCompleteMaven | < 2.9 | 2.9 |
Affected products
2- Range: unspecified
Patches
Vulnerability mechanics
References
5- github.com/advisories/GHSA-g5mj-c26g-vmpmghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2023-24443ghsaADVISORY
- github.com/jenkinsci/testcomplete-plugin/commit/971003ea578a090ed9a5b9487acb9d2aa93645d3ghsaWEB
- github.com/jenkinsci/testcomplete-plugin/commit/cfb0fc3cd807cb72c24424cef98ce39710f2e5fbghsaWEB
- www.jenkins.io/security/advisory/2023-01-24/ghsaWEB
News mentions
1- Jenkins Security Advisory 2023-01-24Jenkins Security Advisories · Jan 24, 2023