CVE-2022-30972

CVE-2022-30972 affects Jenkins Storable Configs Plugin 1.0 and earlier. The vulnerability arises because the XML parser is not configured to prevent XML external entity (XXE) attacks, allowing an attacker to have Jenkins parse a local XML file (e.g., archived artifacts) that uses external entitie...