Non notée

CVE-2021-21649 Jenkins Dashboard View Plugin 2.15 and earlier does not escape URLs referenced in Image Dashboard Portlets, resulting in…

Description

Jenkins Dashboard View Plugin 2.15 and earlier does not escape URLs referenced in Image Dashboard Portlets, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Configure permission.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Jenkins Dashboard View Plugin 2.15	premières → 2.15	Pas de correctif indiqué
Jenkins Dashboard View Plugin 2.12	premières → < 2.12.1	2.12.1

Les 3 CVE de Jenkins Dashboard View Plugin →

CVE-2022-27197 Jenkins Dashboard View Plugin 2.18 and earlier does not perform URL validation for the Iframe Portlet's Iframe source… Non notée CVE-2019-10396 Jenkins Dashboard View Plugin 2.11 and earlier did not escape build descriptions, resulting in a cross-site scripting… Non notée

Vous utilisez Jenkins Dashboard View Plugin ?

Suivre cette CVE Surveiller Jenkins Dashboard View Plugin Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2021-21649

Chronologie

Publiée 11 mai 2021
Dernière modification 3 août 2024

Références

www.jenkins.io www.jenkins.io

Suivre cette CVE

CVE-2021-21649 Jenkins Dashboard View Plugin 2.15 and earlier does not escape URLs referenced in Image Dashboard Portlets, resulting in…

Description

Produits et versions touchés

Autres CVE de Jenkins Dashboard View Plugin