Skip to content
OpenAdvisories
High · 8.8 CVE-2021-21657 EUVD-2022-3603GHSA-cphv-7cxw-5hcc

XXE vulnerability in Jenkins Filesystem Trigger Plugin

Published May 25, 2021 · Updated Aug 3, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Filesystem Trigger Plugin Package: org.jenkins-ci.plugins:fstrigger Category: Web / CMS Ecosystem: Maven

Description

Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Filesystem Trigger Plugin unspecified – ≤ 0.40 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:fstrigger < 0.41 0.41 GHSA-cphv-7cxw-5hcc

References