ZeroHour

CVE-2021-21657

CVSS 3.1
8.8 high
EPSS
2%p74
Published
()
Modified
Description

Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Vendors
jenkins
Products
filesystem trigger
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.