Oct 8, 2020 · A discrepancy between the behavior of the plugin and the Stapler web framework in parsing URL paths allows attackers to craft URLs that would ...

... <url> <loc>https://www.jenkins.io/2.0/</loc> ... security-fix-hudson-1-365-released/</loc> ... advisory-in-jenkins-core/</loc> <lastmod>2012-03-06</lastmod> ...