CVE-2026-70448

Jenkins Project / Jenkins Ivy Report Plugin PUBLISHED

Description (CNA)

Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks when processing Ivy report files.

Affected (CNA)

Vendor / product	Versions
Jenkins Project / Jenkins Ivy Report Plugin	affected 0 through 1.2

CWE

No CWE identifiers supplied.

References

https://www.jenkins.io/security/advisory/2026-08-05/#SECURITY-3899

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.