PT-2021-14715 · Jenkins · Jenkins Selenium Html Report Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Selenium HTML report Plugin versions 1.0 and earlier Description: The issue arises from the plugin not configuring its XML parser to prevent XML external entity XXE attacks, allowing attackers who can control the report files parsed b...