Jenkins Urltrigger
2 CVEs affecting Jenkins Urltrigger. Latest disclosed: 2021-05-25. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-21659 | High | 8.1 | 2021-05-25 | Jenkins URLTrigger Plugin 0.48 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. |
CVE-2018-1000606 | Medium | 6.5 | 2018-06-26 | A server-side request forgery vulnerability exists in Jenkins URLTrigger Plugin 0.41 and earlier in URLTrigger.java that allows attackers with Overall/Read acc… |