Skip to content
Sign in
Not rated

CVE-2021-21628 Jenkins Build With Parameters Plugin 1.5 and earlier does not escape parameter names and descriptions, resulting in a…

Description

Jenkins Build With Parameters Plugin 1.5 and earlier does not escape parameter names and descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

Affected products and versions

Product Affected versions Fixed in
Jenkins Build With Parameters Plugin 1.5 earliest → 1.5 No fix stated

Other CVEs of Jenkins Build With Parameters Plugin

The 2 CVEs of Jenkins Build With Parameters Plugin →
CVE-2021-21629 A cross-site request forgery (CSRF) vulnerability in Jenkins Build With Parameters Plugin 1.5 and earlier allows… Not rated
Track this CVE