Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-21667
HistoryJun 16, 2021 - 2:15 p.m.

Cross site scripting

2021-06-1614:15:00
PRIOn knowledge base
www.prio-n.com
2

0.001 Low

EPSS

Percentile

22.3%

Jenkins Scriptler Plugin 3.2 and earlier does not escape parameter names shown in job configuration forms, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Scriptler/Configure permission.

CPENameOperatorVersion
scriptlerle3.2

0.001 Low

EPSS

Percentile

22.3%