CVE-2021-21680 Jenkins Nested View Plugin 1.20 and earlier does not configure its XML transformer to prevent XML external entity…

Description

Jenkins Nested View Plugin 1.20 and earlier does not configure its XML transformer to prevent XML external entity (XXE) attacks.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Jenkins Nested View Plugin 1.20	premières → 1.20	Pas de correctif indiqué
Jenkins Nested View Plugin 1.19	premières → < 1.19.1	1.19.1

Autres CVE de Jenkins Nested View Plugin

Les 2 CVE de Jenkins Nested View Plugin →

CVE-2022-34182 Jenkins Nested View Plugin 1.20 through 1.25 (both inclusive) does not escape search parameters, resulting in a… Non notée