CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

RedhatCVE•added 2025/05/22 7:11 p.m.•7 views

CVE-2021-21680

Jenkins Nested View Plugin 1.20 and earlier does not configure its XML transformer to prevent XML external entity XXE attacks...

7.1CVSS6.7AI score0.01321EPSS

Exploits0References1

OSV•added 2021/08/31 2:15 p.m.•23 views

CVE-2021-21680

Jenkins Nested View Plugin 1.20 and earlier does not configure its XML transformer to prevent XML external entity XXE attacks...

7.1CVSS6.7AI score

Exploits0References2

CVE•added 2021/08/31 1:50 p.m.•72 views

CVE-2021-21680

CVE-2021-21680 : Jenkins Nested View Plugin (versions ≤ 1.20) does not configure its XML transformer to disable external entity resolution, enabling XXE attacks via crafted view XML. Public references (OSV, Red Hat, GHSA) indicate that starting with version 1.21 Jenkins disables external entity r...

7.1CVSS7AI score0.01321EPSS

Exploits0References2Affected Software1