Jenkins Project Jenkins Nested View Plugin
2 CVEs affecting Jenkins Project Jenkins Nested View Plugin. Latest disclosed: 2022-06-23. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-21680 | High | 7.1 | 2021-08-31 | Jenkins Nested View Plugin 1.20 and earlier does not configure its XML transformer to prevent XML external entity (XXE) attacks. |
CVE-2022-34182 | Medium | 6.1 | 2022-06-23 | Jenkins Nested View Plugin 1.20 through 1.25 (both inclusive) does not escape search parameters, resulting in a reflected cross-site scripting (XSS) vulnerabil… |