CVE-2022-45396

https://notcve.org/view.php?id=CVE-2022-45396

Jenkins SourceMonitor Plugin 0.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. Jenkins SourceMonitor Plugin 0.2 y versiones anteriores no configuran su analizador XML para evitar ataques de entidades externas XML (XXE). • http://www.openwall.com/lists/oss-security/2022/11/15/4 https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2927 • CWE-611: Improper Restriction of XML External Entity Reference •