CVE-2021-21642
high · 8.1Jenkins Config File Provider Plugin 3.7.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
8.1
CVSS
37.8%
EPSS (exploit prob.)
98th
EPSS percentile
2021-04-21
Published
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-611
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| jenkins | config_file_provider | <= 3.7.0 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2021-21642