Vulnerability Bulletins |
CVE-2025-64134 |
|
| Affected software | JENKINS |
| Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity (XXE) attacks. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-64134 | |