Generic Webhook Trigger

generic_webhook_trigger

Vendor: Jenkins • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-43412 1Jenkins 1Generic Webhook Trigger Jun 17, 2026 Oct 19, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Jenkins Generic Webhook Trigger Plugin 1.84.1 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statis...Show more Jenkins Generic Webhook Trigger Plugin 1.84.1 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.Show less
CVE-2022-25185 1Jenkins 1Generic Webhook Trigger Jun 17, 2026 Feb 15, 2022 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Jenkins Generic Webhook Trigger Plugin 1.81 and earlier does not escape the build cause when using the webhook, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure...Show more Jenkins Generic Webhook Trigger Plugin 1.81 and earlier does not escape the build cause when using the webhook, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.Show less
CVE-2021-21669 1Jenkins 1Generic Webhook Trigger Jun 17, 2026 Jun 18, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Jenkins Generic Webhook Trigger Plugin 1.72 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.