Description
Hudson (aka org.jvnet.hudson.main:hudson-core) before 3.3.2 allows XXE attacks.
Remediation
References
https://github.com/advisories/GHSA-j3h2-8mf8-j5r2
https://security.snyk.io/vuln/SNYK-JAVA-ORGJVNETHUDSONMAIN-31221
https://wiki.eclipse.org/Hudson-ci/alerts/CVE-2015-8031
Related Vulnerabilities
CVE-2021-21290 Vulnerability in maven package io.netty:netty-codec-http
CVE-2021-45105 Vulnerability in maven package org.apache.logging.log4j:log4j-core
CVE-2022-1274 Vulnerability in maven package org.keycloak:keycloak-themes
CVE-2020-15231 Vulnerability in maven package org.mapfish.print:print-servlet
CVE-2022-45688 Vulnerability in maven package cn.hutool:hutool-json