← Back

Code Coverage Api

code_coverage_api

Vendor: Jenkins • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-21677
1Jenkins
1Code Coverage Api
Jun 17, 2026
Aug 31, 2021
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Jenkins Code Coverage API Plugin 1.4.0 and earlier does not apply Jenkins JEP-200 deserialization protection to Java objects it deserializes from disk, resulting in a remote code execution vulnerability.
CVE-2020-2172
1Jenkins
1Code Coverage Api
Jun 17, 2026
Apr 7, 2020
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Jenkins Code Coverage API Plugin 1.1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
CVE-2020-2106
1Jenkins
1Code Coverage Api
Jun 17, 2026
Jan 29, 2020
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Jenkins Code Coverage API Plugin 1.1.2 and earlier does not escape the filename of the coverage report used in its view, resulting in a stored XSS vulnerability exploitable by users able to change job configurations.