description: XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query.
problem types: Other
affected:
{
product: Jenkins
vendor: CloudBees
versions:
status: affected, version: before 1.600
}
{
product: Jenkins LTS
vendor: CloudBees
versions:
status: affected, version: before 1.596.1
}
