Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-21611
HistoryJan 13, 2021 - 4:15 p.m.

Cross site scripting

2021-01-1316:15:00
PRIOn knowledge base
www.prio-n.com
9

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape display names and IDs of item types shown on the New Item page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to specify display names or IDs of item types.

CPENameOperatorVersion
jenkinsle2.274
jenkinsle2.263.1

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%