CVE-2023-28680 (published 2023-03-23T11:26:08.166Z)
Jenkins Crap4J Plugin 0.9 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected products: Vendor: Jenkins Project
Product: Jenkins Crap4J Plugin
Versions: 0