Lucene search
GoogleOSV:GHSA-WV63-GWR9-5C55HistoryMay 24, 2022 - 5:39 p.m.
Stored XSS vulnerability in Jenkins button labels
2022-05-2417:39:12
Google
osv.dev
23
0.001 Low
EPSS
Percentile
22.0%
Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape button labels in the Jenkins UI.
This results in a cross-site scripting vulnerability exploitable by attackers with the ability to control button labels. An example of buttons with a user-controlled label are the buttons of the Pipeline input step.
Jenkins 2.275, LTS 2.263.2 escapes button labels in the Jenkins UI.
Related
redhatcve
redhatcve
CVE-2021-21608
2021-02-04 13:52:17
osv
osv
BIT-jenkins-2021-21608
2024-03-06 11:03:04
CVE-2021-21608
2021-01-13 16:15:13
github
github
Stored XSS vulnerability in Jenkins button labels
2022-05-24 17:39:12
cve
cve
CVE-2021-21608
2021-01-13 16:15:13
prion
prion
Cross site scripting
2021-01-13 16:15:00
cvelist
cvelist
CVE-2021-21608
2021-01-13 15:55:30
alpinelinux
alpinelinux
CVE-2021-21608
2021-01-13 16:15:13
nvd
nvd
CVE-2021-21608
2021-01-13 16:15:13
openvas
openvas
Jenkins < 2.275, < 2.263.2 Multiple Vulnerabilities - Linux
2021-01-14 00:00:00
Jenkins < 2.275, < 2.263.2 Multiple Vulnerabilities - Windows
2021-01-14 00:00:00
archlinux
archlinux
[ASA-202101-41] jenkins: multiple issues
2021-01-20 00:00:00
nessus
nessus
FreeBSD : jenkins -- multiple vulnerabilities (d6f76976-e86d-4f9a-9362-76c849b10db2)
2021-01-14 00:00:00
Jenkins < 2.263.2 LTS / 2.275 Multiple Vulnerabilities
2021-01-22 00:00:00
RHEL 7 / 8 : OpenShift Container Platform 4.5.33 (RHSA-2021:0429)
2021-03-03 00:00:00
freebsd
freebsd
jenkins -- multiple vulnerabilities
2021-01-13 00:00:00
redhat
redhat