Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 21:29:19 +0000 cnvd-2021-38298 https://vulnerability.circl.lu/vuln/cnvd-2021-38298 cnvd-2021-38298 https://vulnerability.circl.lu/vuln/cnvd-2021-38298 fkie_cve-2021-21659 https://vulnerability.circl.lu/vuln/fkie_cve-2021-21659 <p>Jenkins URLTrigger Plugin 0.48 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.</p> <p>Jenkins URLTrigger Plugin 0.48 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2021-21659 GHSA-34j5-c4cv-mmg5 — XXE vulnerability in Jenkins URLTrigger Plugin https://vulnerability.circl.lu/vuln/ghsa-34j5-c4cv-mmg5 <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:urltrigger</p> <p>Jenkins URLTrigger Plugin 0.48 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.</p> <p>This allows attackers with Job/Configure permission or otherwise able to control the contents of an URL to an XML document being examined for changes to have Jenkins parse a crafted XML document that uses external entities for extraction of secrets from the polling Jenkins controller or agent, server-side request forgery, or denial-of-service attacks.</p> <p>UJenkins RLTrigger Plugin 0.49 disables external entity resolution for its XML parser.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:urltrigger</p> <p>Jenkins URLTrigger Plugin 0.48 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.</p> <p>This allows attackers with Job/Configure permission or otherwise able to control the contents of an URL to an XML document being examined for changes to have Jenkins parse a crafted XML document that uses external entities for extraction of secrets from the polling Jenkins controller or agent, server-side request forgery, or denial-of-service attacks.</p> <p>UJenkins RLTrigger Plugin 0.49 disables external entity resolution for its XML parser.</p> https://vulnerability.circl.lu/vuln/ghsa-34j5-c4cv-mmg5 gsd-2021-21659 https://vulnerability.circl.lu/vuln/gsd-2021-21659 gsd-2021-21659 https://vulnerability.circl.lu/vuln/gsd-2021-21659