Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-93371
HistoryNov 17, 2021 - 12:00 a.m.

Jenkins code issue vulnerability (CNVD-2021-93371)

2021-11-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

0.001 Low

EPSS

Percentile

28.6%

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.A code issue vulnerability exists in Jenkins Plugin, which stems from OWASP Dependency-Check version 5.1.1 and earlier not configuring its XML parser to prevent XML External Entity (XXE) attacks. No detailed vulnerability details are available at this time.

CPENameOperatorVersion
jenkins owasp dependency-checkle5.1.1

0.001 Low

EPSS

Percentile

28.6%