Home

CVE-2021-21669

Description

Jenkins Generic Webhook Trigger Plugin 1.72 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.213

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2021-21669 are fixed in Jenkins - generic-webhook-trigger 1.74Windows
Vulnerabilities CVE-2021-21669 are fixed in Jenkins - generic-webhook-trigger for Linux 1.74Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234