[org.jenkins-ci.plugins:xcode-plugin] XML external entity (XXE) attacks in Jenkins Xcode integration Plugin

Jenkins Xcode integration Plugin 2.0.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-21656
• https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2335
• https://github.com/advisories/GHSA-wfxp-4qgw-qp3c