CVE-2021-21701: Jenkins project Jenkins Performance Plugin

Описание

Оригинално описание

Jenkins Performance Plugin 3.20 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Засегнати продукти

• Jenkins project Jenkins Performance Plugin: unspecified до 3.20; next of 3.20 преди unspecified

История

Други уязвимости в Jenkins project Jenkins Performance Plugin

• 8.8CVE-2026-84670

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-21701
• https://nvd.nist.gov/vuln/detail/CVE-2021-21701
• https://www.jenkins.io/security/advisory/2021-11-12/#SECURITY-2394
• http://www.openwall.com/lists/oss-security/2021/11/12/1
• https://www.zerodayinitiative.com/advisories/ZDI-21-1313/