1 results (0.003 seconds)

CVSS: 8.2EPSS: 0%CPEs: 1EXPL: 0

Jenkins Phabricator Differential Plugin 2.1.5 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. • https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2942 • CWE-611: Improper Restriction of XML External Entity Reference •