CVE-2021-21628

🗓️ 30 Mar 2021 11:10:30Reported by jenkinsType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 75 Views

Jenkins Build With Parameters Plugin 1.5 and earlier does not escape parameter names and descriptions, resulting in a stored cross-site scripting (XSS) vulnerability

Reporter	Title	Published	Views	Family All 11
CNNVD	Jenkins Parameterized Build 跨站脚本漏洞	30 Mar 202100:00	–	cnnvd
CNVD	CloudBees Jenkins Build With Parameters Plugin Cross-Site Scripting Vulnerability	31 Mar 202100:00	–	cnvd
Cvelist	CVE-2021-21628	30 Mar 202111:10	–	cvelist
EUVD	EUVD-2022-5815	3 Oct 202520:07	–	euvd
Github Security Blog	Stored XSS vulnerability in Jenkins Build With Parameters Plugin	24 May 202217:45	–	github
Tenable Nessus	Jenkins Plugins Multiple Vulnerabilities (Jenkins Security Advisory 2021-03-30)	30 Nov 202100:00	–	nessus
NVD	CVE-2021-21628	30 Mar 202112:16	–	nvd
OSV	GHSA-XJRG-6FV9-6RJG Stored XSS vulnerability in Jenkins Build With Parameters Plugin	24 May 202217:45	–	osv
Prion	Cross site scripting	30 Mar 202112:16	–	prion
Positive Technologies	PT-2021-14671 · Jenkins · Jenkins Build With Parameters Plugin +1	30 Mar 202100:00	–	ptsecurity

NVD

Node

jenkins build_with_parametersRange≤1.5jenkins

[
  {
    "product": "Jenkins Build With Parameters Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "lessThanOrEqual": "1.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
jenkins	www.jenkins.io/security/advisory/2021-03-30/
openwall	www.openwall.com/lists/oss-security/2021/03/30/1

21 Nov 2024 05:48Current

5.2Medium risk

Vulners AI Score5.2

CVSS 23.5

CVSS 3.15.4

EPSS0.01259

CWE-79