8.2
High
CVE-2023-28683 Jenkins Phabricator Differential Plugin 2.1.5 and earlier does not configure its XML parser to prevent XML external…
Description
Jenkins Phabricator Differential Plugin 2.1.5 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Phabricator Differential Plugin 2.1 | earliest → 2.1.5 | No fix stated |