Jenkins Project Jenkins Semantic Versioning Plugin

• CVE-2023-24430 Critical 9.8 Jenkins Semantic Versioning Plugin 1.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. 1.3%
• CVE-2023-24429 Critical 9.8 Jenkins Semantic Versioning Plugin 1.14 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing 1.3%
• CVE-2022-27201 Unrated Jenkins Semantic Versioning Plugin 1.13 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing 1.4%