Skip to content
OpenAdvisories
Medium · 4.3 CVE-2021-21672 EUVD-2021-1476GHSA-hxxp-6546-wv6r

XXE vulnerability in Jenkins Selenium HTML report Plugin

Published Jun 30, 2021 · Updated Aug 3, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Selenium HTML report Plugin Package: org.jenkins-ci.plugins:seleniumhtmlreport Category: Web / CMS Ecosystem: Maven

Description

Jenkins Selenium HTML report Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Selenium HTML report Plugin unspecified – ≤ 1.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:seleniumhtmlreport < 1.1 1.1 GHSA-hxxp-6546-wv6r

References