Product · Jenkins Project

Jenkins Generic Webhook Trigger Plugin

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2021-21669 EPSS 26%

XXE vulnerability in Jenkins Generic Webhook Trigger Plugin

Jenkins Generic Webhook Trigger Plugin 1.72 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Jenkins Project Jenkins Generic Webhook Trigger Plugin org.jenkins-ci.plugins:generic-webhook-trigger Web / CMS Maven

Jun 18, 2021