Boletines de Vulnerabilidades

CVE-2025-64134

   
Software afectado JENKINS
 
Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevent XML external entity (XXE) attacks.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-64134