Config File Provider Security Vulnerabilities and Issues — Config File Provider CVE List

Lucene search

JenkinsConfig File Provider

2 matches found

CVE•added 2021/04/21 3:15 p.m.•152 views

CVE-2021-21642

Jenkins Config File Provider Plugin 3.7.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

8.1CVSS7.8AI score0.01003EPSS

CVE•added 2019/01/09 11:29 p.m.•37 views

CVE-2018-1000414

A cross-site request forgery vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in ConfigFilesManagement.java, FolderConfigFileAction.java that allows creating and editing configuration file definitions.

8.1CVSS8AI score0.00072EPSS