Skip to content
OpenAdvisories
Critical · 9.1 CVE-2021-21658 EUVD-2022-4692GHSA-p674-hh8x-rv5h

XML external entity vulnerability in Jenkins Nuget Plugin

Published May 25, 2021 · Updated Aug 3, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Nuget Plugin Package: org.jenkins-ci.plugins:nuget Category: Web / CMS Ecosystem: Maven

Description

Jenkins Nuget Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Nuget Plugin unspecified – ≤ 1.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:nuget < 1.1 1.1 GHSA-p674-hh8x-rv5h

References