Filtered by vendor Jenkins Subscriptions
Filtered by product Urltrigger Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-21659 1 Jenkins 1 Urltrigger 2023-10-25 8.1 High
Jenkins URLTrigger Plugin 0.48 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
CVE-2018-1000606 1 Jenkins 1 Urltrigger 2022-10-03 N/A
A server-side request forgery vulnerability exists in Jenkins URLTrigger Plugin 0.41 and earlier in URLTrigger.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.