Urltrigger (Jenkins) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 52 known versions, newest CVE from 2021-05-25. Vendor: Jenkins.

CVEs of Urltrigger

• CVE-2021-21659 - CVSS 8.1 (high), 2021-05-25: Jenkins URLTrigger Plugin 0.48 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
• CVE-2018-1000606 - CVSS 6.5 (medium), 2018-06-26: A server-side request forgery vulnerability exists in Jenkins URLTrigger Plugin 0.41 and earlier in URLTrigger.java that allows attackers with Overall/Read…