Known vulnerabilities in Generic Webhook Trigger

Vendor: Jenkins
Software CPE: cpe:2.3:a:jenkins:generic_webhook_trigger:*:*:*:*:*:*:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Generic Webhook Trigger Generic Webhook Trigger is affected by 3 known vulnerabilities: 1 medium, 2 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68546 - Information Exposure Through Timing Discrepancy
CVE-2022-43412
CWE-208 Low
No
No
1.84.2 20.10.2022 SB2022102063
#VU60645 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-25185
CWE-79 Low
No
No
1.82 16.02.2022 SB2022021610
#VU54295 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-21669
CWE-611 Medium
No
No
1.74 22.06.2021 SB2021062203