fr Sign in

Not rated

CVE-2021-21669 Jenkins Generic Webhook Trigger Plugin 1.72 and earlier does not configure its XML parser to prevent XML external entity…

Description

Jenkins Generic Webhook Trigger Plugin 1.72 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Generic Webhook Trigger Plugin 1.72	earliest → 1.72	No fix stated

References

www.jenkins.io www.jenkins.io
[oss-security] 20210618 Vulnerability in Jenkins Generic Webhook Trigger Plugin www.openwall.com

Timeline

Published June 18, 2021
Last modified August 3, 2024

The 3 CVEs of Jenkins Generic Webhook Trigger Plugin →

CVE-2022-43412 Jenkins Generic Webhook Trigger Plugin 1.84.1 and earlier uses a non-constant time comparison function when checking… 5.3 Medium CVE-2022-25185 Jenkins Generic Webhook Trigger Plugin 1.81 and earlier does not escape the build cause when using the webhook,… Not rated

Track this CVE