22 matches found
CVE-2026-84675
OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build...
EUVD-2026-70148
OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build...
CVE-2026-84675
OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build...
CVE-2026-84675
OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build...
CVE-2026-84675
The Jenkins TICS Plugin versions 2025.1.1 and earlier are vulnerable to an OS command injection flaw. The root cause is the failure to correctly escape build environment variable values when constructing OS commands. An attacker capable of controlling these environment variable values can execute...
CVE-2026-84675: Improper Neutralization of Special Elements used in an OS Command
OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build...
PT-2026-84798
OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build...
CVE-2021-21613
Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to control TICS service response content...
XSS vulnerability in Jenkins TICS Plugin
Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses. This results in a cross-site scripting XSS vulnerability exploitable by attackers able to control TICS service response content. Jenkins TICS Plugin 2020.3.0.7 escapes TICS service responses, or strips HTML out, as...
GHSA-XMW5-45V9-PXQX XSS vulnerability in Jenkins TICS Plugin
Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses. This results in a cross-site scripting XSS vulnerability exploitable by attackers able to control TICS service response content. Jenkins TICS Plugin 2020.3.0.7 escapes TICS service responses, or strips HTML out, as...
CloudBees Jenkins Cross-Site Scripting Vulnerability (CNVD-2021-07539)
CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site scripting...
CVE-2021-21613
Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to control TICS service response content...
CVE-2021-21613
Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to control TICS service response content...
Cross site scripting
Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to control TICS service response content...
CVE-2021-21613
Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to control TICS service response content...
CVE-2021-21613
Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to control TICS service response content...
CVE-2021-21613
Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to control TICS service response content...
CVE-2021-21613
CVE-2021-21613 affects the Jenkins TICS Plugin up to 2020.3.0.6. The issue is that the plugin does not escape TICS service responses, enabling cross-site scripting (XSS) if an attacker can control the response content. A fix is available: Jenkins TICS Plugin 2020.3.0.7 escapes or strips HTML in T...
CVE-2021-21613
Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to control TICS service response content...
CloudBees Jenkins TICS Plugin 跨站脚本漏洞
CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site scripting...