Not rated
CVE-2021-21680 Jenkins Nested View Plugin 1.20 and earlier does not configure its XML transformer to prevent XML external entity…
Description
Jenkins Nested View Plugin 1.20 and earlier does not configure its XML transformer to prevent XML external entity (XXE) attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Nested View Plugin 1.20 | earliest → 1.20 | No fix stated |
| Jenkins Nested View Plugin 1.19 | earliest → < 1.19.1 | 1.19.1 |