CVE-2021-21642

Jenkins Config File Provider Plugin 3.7.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks

published April 21, 2021

CVSS
—
EPSS
38%
Percentile
98.5
In the wild
Unconfirmed
What it is

Jenkins Config File Provider Plugin 3.7.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.37830 · 98.5th percentile
Published
2021-04-21T14:20Z
EPSS history
Timeline
  • 21 APR 14:20Z
    Jenkins Config File Provider Plugin 3.7.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks
    cvelistv5