Description
Jenkins Compuware Common Configuration Plugin 1.0.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Remediation
References
https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2832
Related Vulnerabilities
CVE-2016-8609 Vulnerability in maven package org.keycloak:keycloak-core
CVE-2019-0230 Vulnerability in maven package org.apache.struts:struts2-core
CVE-2012-0818 Vulnerability in maven package org.jboss.resteasy:resteasy-jaxrs
CVE-2015-6524 Vulnerability in maven package org.apache.activemq:activemq-osgi
CVE-2013-2165 Vulnerability in maven package org.richfaces.core:richfaces-core-impl