CVE-2023-28682

CVE-2023-28682 affects Jenkins Performance Publisher Plugin 8.09 and earlier. The root cause is that the plugin’s XML parser is not configured to prevent XML external entity (XXE) attacks, allowing crafted PerfPublisher report files to be parsed in a way that can disclose secrets from the Jenkins...