Jenkins Coverage/Complexity Scatter Plot Plugin XML外部实体注入漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.An XML external entity injection vulnerability exists in Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier versions. A remote attacker could use the external entity to extract secrets from a Jenkins controller or server-side request forgery.