Description
Jenkins Compuware Common Configuration Plugin 1.0.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Remediation
References
https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2832
Related Vulnerabilities
CVE-2023-2585 Vulnerability in maven package org.keycloak:keycloak-services
CVE-2018-8027 Vulnerability in maven package org.apache.camel:camel-core
CVE-2020-1935 Vulnerability in maven package org.apache.tomcat:tomcat-coyote
CVE-2020-2301 Vulnerability in maven package org.jenkins-ci.plugins:active-directory
CVE-2022-36881 Vulnerability in maven package org.jenkins-ci.plugins:git-client