Description
Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Remediation
References
https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2940
Related Vulnerabilities
CVE-2021-21344 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2023-29471 Vulnerability in maven package com.typesafe.akka:akka-stream-kafka
CVE-2020-2162 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2023-31141 Vulnerability in maven package org.opensearch.plugin:opensearch-security
CVE-2018-1048 Vulnerability in maven package io.undertow:undertow-core