CVE-2023-28682

Jenkins Performance Publisher Plugin 8.09 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2023-28682

CVE-2023-28682 affects Jenkins Performance Publisher Plugin 8.09 and earlier. The root cause is that the plugin’s XML parser is not configured to prevent XML external entity (XXE) attacks, allowing crafted PerfPublisher report files to be parsed in a way that can disclose secrets from the Jenkins...

CVE-2023-28682

Jenkins Performance Publisher Plugin 8.09 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2023-28682

Jenkins Performance Publisher Plugin 8.09 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...