Jenkins MSTest Plugin 1.0.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
{ "nvd_published_at": "2023-01-26T21:18:00Z", "cwe_ids": [ "CWE-776" ], "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2023-01-27T01:03:33Z" }