Lucene search

K
osvGoogleOSV:CVE-2021-21619
HistoryFeb 24, 2021 - 4:15 p.m.

CVE-2021-21619

2021-02-2416:15:14
Google
osv.dev
3

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%

Jenkins Claim Plugin 2.18.1 and earlier does not escape the user display name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers who are able to control the display names of Jenkins users, either via the security realm, or directly inside Jenkins.

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%