Security Advisory

CVE-2023-28680

7.5
HIGH

Vulnerability Description

Jenkins Crap4J Plugin 0.9 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Published Date April 2, 2023
Official Source NIST NVD Advisory