CVE-2019-1003015

Jenkins Job Import Plugin (versions ≤ 2.1) is affected by an XML External Entity (XXE) vulnerability in RestApiClient.java that lets an attacker who controls the Jenkins HTTP server read arbitrary files and can cause a Denial of Service. The issue is documented across multiple sources (CVE-2019-1...