Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-93374
HistoryNov 17, 2021 - 12:00 a.m.

Jenkins Cross-Site Scripting Vulnerability (CNVD-2021-93374)

2021-11-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
7

0.001 Low

EPSS

Percentile

22.3%

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.A cross-site scripting vulnerability exists in the Jenkins Plugin, which stems from the Scriptler plugin version 3.3 and earlier not escaping script names on the UI when requesting confirmation of deletion. No details of the vulnerability are currently available.

CPENameOperatorVersion
jenkins scriptlerle3.3

0.001 Low

EPSS

Percentile

22.3%