Not rated

CVE-2021-21660 Jenkins Markdown Formatter Plugin 0.1.0 and earlier does not sanitize crafted link target URLs, resulting in a stored…

Description

Jenkins Markdown Formatter Plugin 0.1.0 and earlier does not sanitize crafted link target URLs, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with the ability to edit any description rendered using the configured markup formatter.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Markdown Formatter Plugin 0.1	earliest → 0.1.0	No fix stated

Do you use Jenkins Markdown Formatter Plugin?

Track this CVE Watch Jenkins Markdown Formatter Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2021-21660

Timeline

Published May 25, 2021
Last modified August 3, 2024

References

www.jenkins.io www.jenkins.io
www.whitesourcesoftware.com www.whitesourcesoftware.com
[oss-security] 20210525 Multiple vulnerabilities in Jenkins plugins www.openwall.com

Track this CVE