[com.compuware.jenkins:compuware-topaz-for-total-test] Jenkins Compuware Topaz for Total Test Plugin does not configure its XML parser to prevent XXE attacks

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-43430
• https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2625
• http://www.openwall.com/lists/oss-security/2022/10/19/3
• https://github.com/advisories/GHSA-vhwv-8897-jm7q