Cross site scripting

2021-06-1015:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

36.3%

JSON

Jenkins Kiuwan Plugin 1.6.0 and earlier does not escape query parameters in an error message for a form validation endpoint, resulting in a reflected cross-site scripting (XSS) vulnerability.

CPENameOperatorVersion
kiuwanle1.6.0

CPE	Name	Operator	Version
	kiuwan	le	1.6.0

References

www.openwall.com/lists/oss-security/2021/06/10/14

www.jenkins.io/security/advisory/2021-06-10/

0.001 Low

EPSS

Percentile

36.3%

JSON

Related for PRION:CVE-2021-21666