CVE-2021-21657

Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks

published May 25, 2021

CVSS
—
EPSS
2%
Percentile
75.5
In the wild
Unconfirmed
What it is

Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01596 · 75.5th percentile
Published
2021-05-25T14:10Z
EPSS history
Timeline
  • 25 MAY 14:10Z
    Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks
    cvelistv5