https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T16:46:44.104871+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-22358 EUVD-2026-22358 2026-10-12T16:46:44.107692+00:00 EUVD-2026-22358 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21669 fkie_cve-2021-21669 2026-10-12T16:46:44.107721+00:00

Jenkins Generic Webhook Trigger Plugin 1.72 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

 https://cve.radiocsirt.org/vuln/ghsa-732f-w585-gmpc GHSA-732f-w585-gmpc — XXE vulnerability in Jenkins Generic Webhook Trigger Plugin 2026-10-12T16:46:44.107750+00:00

Affected: Maven: org.jenkins-ci.plugins:generic-webhook-trigger

Jenkins Generic Webhook Trigger Plugin 1.72 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

This allows attackers with the ability to call webhooks configured to extract parameters using XPath to have Jenkins parse a crafted XML request body that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.

Jenkins Generic Webhook Trigger Plugin 1.74 disables external entity resolution for its XML parser.

 https://cve.radiocsirt.org/vuln/gsd-2021-21669 gsd-2021-21669 2026-10-12T16:46:44.107777+00:00 gsd-2021-21669