CVE-2021-21669: Jenkins Generic Webhook Trigger

Critical severity, CVSS 9.8. EPSS: 25.7% chance of exploitation in the next 30 days.

Jenkins Generic Webhook Trigger Plugin 1.72 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

• Jenkins Generic Webhook Trigger: up to and including 1.72

Published 2021-06-18. Last modified 2026-06-17.