Not rated
CVE-2021-21672 Jenkins Selenium HTML report Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity…
Description
Jenkins Selenium HTML report Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Selenium HTML report Plugin 1.0 | earliest → 1.0 | No fix stated |
References
- www.jenkins.io www.jenkins.io
- [oss-security] 20210630 Multiple vulnerabilities in Jenkins and Jenkins plugins www.openwall.com
- [oss-security] 20220414 Re: Browser-mediated attacks on WebDriver servers www.openwall.com
Timeline
- Published
- Last modified