Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 07:19:22 +0000 cnvd-2021-39163 https://cve.radiocsirt.org/vuln/cnvd-2021-39163 cnvd-2021-39163 https://cve.radiocsirt.org/vuln/cnvd-2021-39163 EUVD-2026-22365 https://cve.radiocsirt.org/vuln/euvd-2026-22365 EUVD-2026-22365 https://cve.radiocsirt.org/vuln/euvd-2026-22365 fkie_cve-2021-21657 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21657 <p>Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.</p> <p>Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-21657 GHSA-cphv-7cxw-5hcc — XXE vulnerability in Jenkins Filesystem Trigger Plugin https://cve.radiocsirt.org/vuln/ghsa-cphv-7cxw-5hcc <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:fstrigger</p> <p>Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.</p> <p>This allows attackers with Job/Configure permission or otherwise able to control the contents of an XML file being polled for changes to have Jenkins parse a crafted XML document that uses external entities for extraction of secrets from the polling Jenkins controller or agent, server-side request forgery, or denial-of-service attacks.</p> <p>Jenkins Filesystem Trigger Plugin 0.41 disables external entity resolution for its XML parser.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:fstrigger</p> <p>Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.</p> <p>This allows attackers with Job/Configure permission or otherwise able to control the contents of an XML file being polled for changes to have Jenkins parse a crafted XML document that uses external entities for extraction of secrets from the polling Jenkins controller or agent, server-side request forgery, or denial-of-service attacks.</p> <p>Jenkins Filesystem Trigger Plugin 0.41 disables external entity resolution for its XML parser.</p> https://cve.radiocsirt.org/vuln/ghsa-cphv-7cxw-5hcc gsd-2021-21657 https://cve.radiocsirt.org/vuln/gsd-2021-21657 gsd-2021-21657 https://cve.radiocsirt.org/vuln/gsd-2021-21657