Lucene search
PRIOn knowledge basePRION:CVE-2021-21608HistoryJan 13, 2021 - 4:15 p.m.
Cross site scripting
2021-01-1316:15:00
PRIOn knowledge base
www.prio-n.com
9
Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape button labels in the Jenkins UI, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with the ability to control button labels.
Related
github
github
Stored XSS vulnerability in Jenkins button labels
2022-05-24 17:39:12
redhatcve
redhatcve
CVE-2021-21608
2021-02-04 13:52:17
osv
osv
BIT-jenkins-2021-21608
2024-03-06 11:03:04
CVE-2021-21608
2021-01-13 16:15:13
Stored XSS vulnerability in Jenkins button labels
2022-05-24 17:39:12
cve
cve
CVE-2021-21608
2021-01-13 16:15:13
cvelist
cvelist
CVE-2021-21608
2021-01-13 15:55:30
alpinelinux
alpinelinux
CVE-2021-21608
2021-01-13 16:15:13
nvd
nvd
CVE-2021-21608
2021-01-13 16:15:13
nessus
nessus
FreeBSD : jenkins -- multiple vulnerabilities (d6f76976-e86d-4f9a-9362-76c849b10db2)
2021-01-14 00:00:00
Jenkins < 2.263.2 LTS / 2.275 Multiple Vulnerabilities
2021-01-22 00:00:00
openvas
openvas
Jenkins < 2.275, < 2.263.2 Multiple Vulnerabilities - Linux
2021-01-14 00:00:00
Jenkins < 2.275, < 2.263.2 Multiple Vulnerabilities - Windows
2021-01-14 00:00:00
archlinux
archlinux
[ASA-202101-41] jenkins: multiple issues
2021-01-20 00:00:00
freebsd
freebsd
jenkins -- multiple vulnerabilities
2021-01-13 00:00:00
redhat
redhat