GHSA-g5mj-c26g-vmpm

GitHub Security Advisory

XML Entity Expansion in Jenkins TestComplete support Plugin

✓ GitHub Reviewed CRITICAL Has CVE

Jenkins TestComplete support Plugin 2.8.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Maven org.jenkins-ci.plugins:TestComplete

Affected versions: 0 (fixed in 2.9)

CVE-2023-24443

GHSA ID

GHSA-g5mj-c26g-vmpm

Published

January 26, 2023 9:30 PM

Last Modified

February 3, 2023 8:36 PM

CVSS Score

9.0 /10

Primary Ecosystem

Maven

Primary Package

org.jenkins-ci.plugins:TestComplete

GitHub Reviewed

✓ Yes

Last updated: August 25, 2025 6:33 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.