CVE-2021-21659

The CVE-2021-21659 entry corresponds to an XXE vulnerability in the Jenkins URLTrigger Plugin (versions 0.48 and earlier). The issue arises from the plugin not configuring its XML parser to disable external entity resolution, enabling crafted XML to cause disclosure of secrets, server-side reques...

CVE-2018-1000606

The CVE CVE-2018-1000606 describes a server-side request forgery in the Jenkins URLTrigger Plugin (0.41 and earlier). The vulnerability arises in URLTrigger.java, allowing users with Overall/Read access to induce Jenkins to issue an unauthenticated GET to an attacker-controlled URL. Impact is mis...