Package · Maven

org.jenkins-ci.plugins:urltrigger

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 8.1

CVE-2021-21659 EPSS 67%

XXE vulnerability in Jenkins URLTrigger Plugin

Jenkins URLTrigger Plugin 0.48 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Jenkins Project Jenkins URLTrigger Plugin org.jenkins-ci.plugins:urltrigger Web / CMS Maven

May 25, 2021
Medium 6.5

CVE-2018-1000606

URLTrigger Plugin server-side request forgery vulnerability

A server-side request forgery vulnerability exists in Jenkins URLTrigger Plugin 0.41 and earlier in URLTrigger.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.

org.jenkins-ci.plugins:urltrigger Maven

Jun 26, 2018