ZeroHour

CVE-2021-21669

CVSS 3.1
9.8 critical
EPSS
26%p98
Published
()
Modified
Description

Jenkins Generic Webhook Trigger Plugin 1.72 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Vendors
jenkins
Products
generic webhook trigger
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.