High severity7.1NVD Advisory· Published Aug 31, 2021· Updated Jun 17, 2026
CVE-2021-21680
CVE-2021-21680
Description
Jenkins Nested View Plugin 1.20 and earlier does not configure its XML transformer to prevent XML external entity (XXE) attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.jenkins-ci.plugins:nested-viewMaven | < 1.21 | 1.21 |
Affected products
3- Range: unspecified
Patches
Vulnerability mechanics
References
5- www.openwall.com/lists/oss-security/2021/08/31/1nvdMailing ListThird Party AdvisoryWEB
- github.com/advisories/GHSA-5wc4-w63v-97c3ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2021-21680ghsaADVISORY
- www.jenkins.io/security/advisory/2021-08-31/nvdVendor AdvisoryWEB
- github.com/jenkinsci/nested-view-plugin/commit/79787294f034b3009c3de557c6441c9ceba936b8ghsaWEB
News mentions
1- Jenkins Security Advisory 2021-08-31Jenkins Security Advisories · Aug 31, 2021