CVE-2022-28140: Jenkins Flaky Test Handler

High severity, CVSS 8.1. EPSS: 1% chance of exploitation in the next 30 days.

Jenkins Flaky Test Handler Plugin 1.2.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

• Jenkins Flaky Test Handler: up to and including 1.2.1

Published 2022-03-29. Last modified 2026-06-17.