11399 matches found
CVE-2021-21684
Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting XSS vulnerability...
CVE-2021-21684
Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting XSS vulnerability...
Cross site scripting
Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting XSS vulnerability...
CVE-2021-21684
Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting XSS vulnerability...
CVE-2021-21684
CVE-2021-21684 affects Jenkins Git Plugin 4.8.2 and earlier. The stored XSS arises because Git SHA-1 checksum parameters are not escaped when displayed in a build cause, enabling crafted commit notifications (via /git/notifyCommit) to inject scripts. The issue is mitigated by upgrading to Jenkins...
CVE-2021-21684
Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting XSS vulnerability...
CVE-2021-21684
Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting XSS vulnerability...
OPENSUSE-SU-2021:3300-1 Security update for git
This update for git fixes the following issues: - CVE-2021-40330: Fixed unexpected cross-protocol requests via newline character in gitconnectgit repository path bsc1189992...
SUSE-SU-2021:3300-1 Security update for git
This update for git fixes the following issues: - CVE-2021-40330: Fixed unexpected cross-protocol requests via newline character in gitconnectgit repository path bsc1189992...
Jenkins 跨站脚本漏洞
Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project. A cross-site scripting vulnerability exists in Jenkins Git Plugin 4.8.2 and earlier versions that stems from not bypassin...
Security update for git (low)
openSUSE Security Update: Security update for git Announcement ID: openSUSE-SU-2021:3300-1 Rating: low References: 1189992 Cross-References: CVE-2021-40330 CVSS scores: CVE-2021-40330 SUSE: 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Affected Products: openSUSE Leap 15.3 An update that fixes...
PT-2021-14727 · Jenkins · Jenkins +1
Name of the Vulnerable Software and Affected Versions: Jenkins Git Plugin versions 4.8.2 and earlier Description: The issue arises from the failure to escape Git SHA-1 checksum parameters provided to commit notifications when displayed in a build cause, resulting in a stored cross-site scripting...
Stored XSS vulnerability in git
git 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers able to submit crafted commit notifications to the...
CVE-2021-39881
GitLab CVE-2021-39881 affects GitLab CE/EE from version 7.7 onward, where an attacker can create an OAuth client with arbitrary scope names to trick users into authorizing the malicious client via spoofed scope names and descriptions. The connected sources corroborate the same vulnerability descr...
UBUNTU-CVE-2021-39872
In all versions of GitLab CE/EE since version 14.1, an improper access control vulnerability allows users with expired password to still access GitLab through git and API through access tokens acquired before password expiration...
Improper access control
In all versions of GitLab CE/EE since version 14.1, an improper access control vulnerability allows users with expired password to still access GitLab through git and API through access tokens acquired before password expiration...
CVE-2021-39872
CVE-2021-39872 affects GitLab CE/EE (all versions since 14.1) and stems from an improper access-control flaw that allows users with expired passwords to access GitLab via git and API tokens that were acquired before expiration. The vulnerability is described as enabling access through existing to...
CVE-2021-40330 affecting package git 2.23.4-2
CVE-2021-40330 affecting package git 2.23.4-2. A patched version of the package is available...