Not rated

CVE-2021-21622 Jenkins Artifact Repository Parameter Plugin 1.0.0 and earlier does not escape parameter names and descriptions,…

Description

Jenkins Artifact Repository Parameter Plugin 1.0.0 and earlier does not escape parameter names and descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Artifact Repository Parameter Plugin 1.0	earliest → 1.0.0	No fix stated

Do you use Jenkins Artifact Repository Parameter Plugin?

Track this CVE Watch Jenkins Artifact Repository Parameter Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2021-21622

Timeline

Published February 24, 2021
Last modified August 3, 2024

References

www.jenkins.io www.jenkins.io

Track this CVE