6.5
Medium
CVE-2023-28684 Jenkins remote-jobs-view-plugin Plugin 0.0.3 and earlier does not configure its XML parser to prevent XML external…
Description
Jenkins remote-jobs-view-plugin Plugin 0.0.3 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins remote-jobs-view-plugin Plugin 0.0 | earliest → 0.0.3 | No fix stated |