CVE-2021-21658

2021-05-2517:15:08

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.2%

JSON

Jenkins Nuget Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

CPENameOperatorVersion
nuget-plugineqnuget-0.5
nuget-plugineqnuget-0.3
nuget-plugineqnuget-0.7
nuget-plugineqnuget-0.4
nuget-plugineqnuget-0.1
nuget-plugineqnuget-1.0
nuget-plugineqnuget-0.2
nuget-plugineqnuget-0.6

Name	Operator	Version
nuget-plugin	eq	nuget-0.5
nuget-plugin	eq	nuget-0.3
nuget-plugin	eq	nuget-0.7
nuget-plugin	eq	nuget-0.4
nuget-plugin	eq	nuget-0.1
nuget-plugin	eq	nuget-1.0
nuget-plugin	eq	nuget-0.2
nuget-plugin	eq	nuget-0.6