Description
Jenkins TestComplete support Plugin 2.8.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Remediation
References
https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2741
Related Vulnerabilities
CVE-2019-16303 Vulnerability in npm package generator-jhipster
CVE-2019-17573 Vulnerability in maven package org.apache.cxf:cxf-bundle
CVE-2016-10364 Vulnerability in npm package kibana
CVE-2013-0158 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2020-1942 Vulnerability in maven package org.apache.nifi:nifi-security-utils