Security Advisory
CVE-2015-1809
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query.