Jenkins Urltrigger vulnerabilities

2 vulnerabilities

Known vulnerabilities in Jenkins Urltrigger, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2018-1000606jenkinsurltrigger+1
EPSS score
0.70%
A server-side request forgery vulnerability exists in Jenkins URLTrigger Plugin 0.41 and earlier in URLTrigger.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.8.1CVE-2021-21659jenkins projectjenkins urltrigger plugin+2
EPSS score
66.77%
Jenkins URLTrigger Plugin 0.48 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.