Home

CVE-2021-21672

Description

Jenkins Selenium HTML report Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Risk Information

Base Score
4.3
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS Score
Exploitation Probability
0.384

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2021-21672 are fixed in Jenkins - seleniumhtmlreport 1.1Windows
Vulnerabilities CVE-2021-21672 are fixed in Jenkins - seleniumhtmlreport for Linux 1.1Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234