CVE-2021-21680

2021-08-3114:15:25

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.5%

JSON

Jenkins Nested View Plugin 1.20 and earlier does not configure its XML transformer to prevent XML external entity (XXE) attacks.

CPENameOperatorVersion
nested-view-plugineqnested-view-1.17
nested-view-plugineqnested-view-1.15
nested-view-plugineqnested-view-1.13
nested-view-plugineqnested-view-1.16
nested-view-plugineqnested-view-1.20
nested-view-plugineqnested-view-1.12
nested-view-plugineqnested-view-1.9
nested-view-plugineqnested-view-1.18
nested-view-plugineqnested-view-1.6
nested-view-plugineqnested-view-1.7

Name	Operator	Version
nested-view-plugin	eq	nested-view-1.17
nested-view-plugin	eq	nested-view-1.15
nested-view-plugin	eq	nested-view-1.13
nested-view-plugin	eq	nested-view-1.16
nested-view-plugin	eq	nested-view-1.20
nested-view-plugin	eq	nested-view-1.12
nested-view-plugin	eq	nested-view-1.9
nested-view-plugin	eq	nested-view-1.18
nested-view-plugin	eq	nested-view-1.6
nested-view-plugin	eq	nested-view-1.7