Improper Restriction of XML External Entity Reference
Jenkins Robot Framework Plugin does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing users with Job/Configure permissions make Jenkins parse crafted XML documents.