Vulnerability Details CVE-2021-21672
Jenkins Selenium HTML report Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.189
EPSS Ranking 95.0%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 4.0
References
- http://www.openwall.com/lists/oss-security/2021/06/30/1
- http://www.openwall.com/lists/oss-security/2022/04/14/2
- https://www.jenkins.io/security/advisory/2021-06-30/#SECURITY-2329
- http://www.openwall.com/lists/oss-security/2021/06/30/1
- http://www.openwall.com/lists/oss-security/2022/04/14/2
- https://www.jenkins.io/security/advisory/2021-06-30/#SECURITY-2329
Products affected by CVE-2021-21672
-
cpe:2.3:a:jenkins:selenium_html_report:-
-
cpe:2.3:a:jenkins:selenium_html_report:0.9
-
cpe:2.3:a:jenkins:selenium_html_report:0.91
-
cpe:2.3:a:jenkins:selenium_html_report:0.92
-
cpe:2.3:a:jenkins:selenium_html_report:0.93
-
cpe:2.3:a:jenkins:selenium_html_report:0.94
-
cpe:2.3:a:jenkins:selenium_html_report:1.0