Jenkins Mercurial Plugin 2.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
| Software | From | Fixed in |
|---|---|---|
| jenkins / mercurial | - | 2.11.x |
org.jenkins-ci.plugins / mercurial
|
- | 2.12 |