Lucene search
+L

9 matches found

Check Point Advisories
Check Point Advisories
•added 2022/11/06 12:00 a.m.•79 views

Jenkins Filesystem Trigger Plugin XML External Entity Expansion (CVE-2021-21659)

An XML external entity expansion vulnerability exists in Jenkins Filesystem Trigger Plugin. Successful exploitation of this vulnerability could result in the disclosure of file contents from the target system...

5.5CVSS1.9AI score0.66774EPSS
SaveExploits0
OSV
OSV
•added 2022/05/24 7:03 p.m.•57 views

GHSA-CPHV-7CXW-5HCC XXE vulnerability in Jenkins Filesystem Trigger Plugin

Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers with Job/Configure permission or otherwise able to control the contents of an XML file being polled for changes to have Jenkins parse a crafted XM...

8.8CVSS8.5AI score0.01596EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2022/05/24 7:03 p.m.•41 views

XXE vulnerability in Jenkins Filesystem Trigger Plugin

Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers with Job/Configure permission or otherwise able to control the contents of an XML file being polled for changes to have Jenkins parse a crafted XM...

8.8CVSS8.2AI score0.01596EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2021/05/25 5:15 p.m.•40 views

CVE-2021-21657

Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.8CVSS6.7AI score
SaveExploits0References2
Cvelist
Cvelist
•added 2021/05/25 2:10 p.m.•42 views

CVE-2021-21657

Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.9AI score0.01596EPSS
SaveExploits0References2
Mend
Mend
•added 2021/05/25 2:10 p.m.•2 views

CVE-2021-21657

Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.8CVSS0.01596EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/05/25 12:00 a.m.•19 views

PT-2021-14700 · Jenkins · Jenkins Filesystem Trigger Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Filesystem Trigger Plugin versions 0.40 and earlier Description: The issue allows attackers with Job/Configure permission or those able to control the contents of an XML file being polled for changes to have Jenkins parse a crafted XM...

8.8CVSS8.4AI score0.01596EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2021/05/25 12:00 a.m.•15 views

Jenkins 代码问题漏洞

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An XML external entity...

8.8CVSS6AI score0.01596EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/25 12:00 a.m.•4 views

CVE-2021-21657: Undefined Security Weakness

Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.8CVSS5.8AI score0.01596EPSS
SaveExploits0References1
Rows per page
Query Builder