Checkstyle

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-9658 Mar 11, 05:29 Maven MEDIUM PATCH This Month

Checkstyle before 8.18 loads external DTDs by default. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XXE Debian Debian Linux Fedora Checkstyle +1

NVD GitHub

CVSS 3.0

5.3

EPSS

3.7%

CVE-2018-1000009 Jan 23, 14:29 Maven HIGH PATCH This Week

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SSRF XXE Jenkins Checkstyle

NVD

CVSS 3.0

8.8

EPSS

0.9%

CVE-2019-9658 Maven

EPSS 4% CVSS 5.3

MEDIUM PATCH This Month

XXE Debian Debian Linux +3

NVD GitHub

CVE-2018-1000009 Maven

EPSS 1% CVSS 8.8

HIGH PATCH This Week

SSRF XXE Jenkins +1

NVD