CVE-2025-64134 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external ent…
High CVSS: 7.1

CVE-2025-64134

Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity (XXE) attacks.
Vendor
Jenkins
Product
Jdepend
CWE
CWE-611
Yayın Tarihi
2025-10-29 14:15:57
Güncelleme
2025-11-05 17:35:42
Source Identifier
jenkinsci-cert@googlegroups.com
KEV Date Added
-

Kategoriler

CWE-611 Jdepend HIGH Jenkins 2025

Referanslar

https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-2936 http://www.openwall.com/lists/oss-security/2025/10/29/2