CVE-2021-21657
Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
- Score
- CVSS 3.1 8.8 High
- Status
- Modified - jenkinsci-cert@googlegroups.com
- Published
- 2021-05-25
- Last modified
- 2024-08-03
Affected products
References
- http://www.openwall.com/lists/oss-security/2021/05/25/3
- https://www.jenkins.io/security/advisory/2021-05-25/#SECURITY-2339
