CVE-2018-1000009

CVE-2018-1000009 concerns the Jenkins Checkstyle Plugin (versions 3.49 and earlier) where an XML External Entity (XXE) vulnerability exists in how it parses build-related files. The root cause is processing XML with external entity references, enabling attackers with Jenkins user permissions to e...