CVE-2021-21642

Publication date

2021-04-21 14:20:28

Family

jenkins

State

PUBLISHED

Description

Jenkins Config File Provider Plugin 3.7.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.