critical9.8
CVE-2022-46682
Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Impact
Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Plot | before 2.1.12 |