Archive

25 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /25 June 2021 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 8.1

CVE-2021-21659 EPSS 67%

XXE vulnerability in Jenkins URLTrigger Plugin

Jenkins URLTrigger Plugin 0.48 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Jenkins Project Jenkins URLTrigger Plugin org.jenkins-ci.plugins:urltrigger Web / CMS Maven

May 25, 2021
High 8.8

CVE-2021-21657

XXE vulnerability in Jenkins Filesystem Trigger Plugin

Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Jenkins Project Jenkins Filesystem Trigger Plugin org.jenkins-ci.plugins:fstrigger Web / CMS Maven

May 25, 2021
High 7.5

CVE-2021-23937

DNS proxy and possible amplification attack

A DNS proxy and possible amplification attack vulnerability in WebClientInfo of Apache Wicket allows an attacker to trigger arbitrary DNS lookups from the server when the X-Forwarded-For header is not properly sanitized. This DNS lookup can be engineered to o…

Apache Software Foundation Apache Wicket org.apache.wicket:wicket-core Maven

May 25, 2021