CloudBees has determined that this plugin will be removed from the CloudBees Assurance Program (CAP) in late 2022. Notification will be provided prior to the removal of the plugin. Please contact CloudBees Support if you have any concerns or questions.
This plugin integrates Mercurial SCM with Jenkins. It includes repository browsing support for hg serve/hgweb, as well as hosted services like Google Code. Features include guaranteed clean builds, named branch support, module lists, Mercurial tool installation, and automatic caching.
- Users without Overall/Read are able to access lists of user names and node names(last version affected: 2.2)
- Missing permission check(last version affected: 2.11)
- XXE vulnerability(last version affected: 2.11)
- Multiple SCM plugins can check out from the controller file system(last version affected: 2.16)