Lucene search
GoogleOSV:GHSA-F9GF-2Q87-5M44HistoryMay 24, 2022 - 7:20 p.m.
Stored XSS vulnerability in Jenkins Scriptler Plugin
2022-05-2419:20:33
Google
osv.dev
8
0.001 Low
EPSS
Percentile
22.3%
Jenkins Scriptler Plugin 3.3 and earlier does not escape the name of scripts on the UI when asking to confirm their deletion.
This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create Scriptler scripts.
Jenkins Scriptler Plugin 3.4 escapes the name of scripts on the UI when asking to confirm their deletion.
Related
cvelist
cvelist
CVE-2021-21700
2021-11-12 10:35:17
github
github
Stored XSS vulnerability in Jenkins Scriptler Plugin
2022-05-24 19:20:33
nvd
nvd
CVE-2021-21700
2021-11-12 11:15:08
alpinelinux
alpinelinux
CVE-2021-21700
2021-11-12 11:15:08
cnvd
cnvd
Jenkins Cross-Site Scripting Vulnerability (CNVD-2021-93374)
2021-11-17 00:00:00
cve
cve
CVE-2021-21700
2021-11-12 11:15:08
prion
prion
Cross site scripting
2021-11-12 11:15:00