Generic Webhook Trigger

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:generic_webhook_trigger:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

VendorJenkins (d708d718-2e77-5ca3-ae9c-38ee4d256744)
ProductGeneric Webhook Trigger (7efde09e-ee8d-5c2c-9f00-4729ffa7f024)
Edition*
Language*
Software edition*
Target softwarejenkins
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-43412 vulnerable 2026-06-08 05:49:31.798644 Details available
Jenkins Generic Webhook Trigger Plugin 1.84.1 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.
Published: 2022-10-19T00:00:00.000Z
Updated: 2025-05-08T19:18:09.268Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25185 vulnerable 2026-06-08 05:41:45.503163 Details available
Jenkins Generic Webhook Trigger Plugin 1.81 and earlier does not escape the build cause when using the webhook, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Published: 2022-02-15T16:11:10.000Z
Updated: 2024-08-03T04:36:05.762Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21669 vulnerable 2026-06-08 05:29:13.106809 Details available
Jenkins Generic Webhook Trigger Plugin 1.72 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Published: 2021-06-18T09:25:10.000Z
Updated: 2024-08-03T18:23:27.500Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.