CVE-2022-45396

The CVE-2022-45396 entry refers to Jenkins SourceMonitor Plugin 0.2 and earlier, which does not configure its XML parser to prevent XML external entity (XXE) attacks. The vulnerability affects the plugin during the Publish SourceMonitor results step by parsing XML input files, enabling potential ...