Not rated
CVE-2021-21622 Jenkins Artifact Repository Parameter Plugin 1.0.0 and earlier does not escape parameter names and descriptions,…
Description
Jenkins Artifact Repository Parameter Plugin 1.0.0 and earlier does not escape parameter names and descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Artifact Repository Parameter Plugin 1.0 | earliest → 1.0.0 | No fix stated |
References
- www.jenkins.io www.jenkins.io
Timeline
- Published
- Last modified