Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 7:11 p.m.5 views

CVE-2021-21613

Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to control TICS service response content...

6.1CVSS5.6AI score0.00241EPSS
Exploits0References1
OSV
OSV
added 2022/05/24 5:39 p.m.19 views

GHSA-XMW5-45V9-PXQX XSS vulnerability in Jenkins TICS Plugin

Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses. This results in a cross-site scripting XSS vulnerability exploitable by attackers able to control TICS service response content. Jenkins TICS Plugin 2020.3.0.7 escapes TICS service responses, or strips HTML out, as...

6.1CVSS6AI score0.00241EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/05/24 5:39 p.m.18 views

XSS vulnerability in Jenkins TICS Plugin

Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses. This results in a cross-site scripting XSS vulnerability exploitable by attackers able to control TICS service response content. Jenkins TICS Plugin 2020.3.0.7 escapes TICS service responses, or strips HTML out, as...

6.1CVSS5.5AI score0.00241EPSS
Exploits0References4Affected Software1
CNVD
CNVD
added 2021/01/29 12:0 a.m.7 views

CloudBees Jenkins Cross-Site Scripting Vulnerability (CNVD-2021-07539)

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site scripting...

6.1CVSS6AI score0.00241EPSS
Exploits0References1
NVD
NVD
added 2021/01/13 4:15 p.m.16 views

CVE-2021-21613

Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to control TICS service response content...

6.1CVSS6AI score0.00241EPSS
Exploits0References1
OSV
OSV
added 2021/01/13 4:15 p.m.1 views

CVE-2021-21613

Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to control TICS service response content...

6.1CVSS6.3AI score0.00241EPSS
Exploits0References1
Prion
Prion
added 2021/01/13 4:15 p.m.15 views

Cross site scripting

Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to control TICS service response content...

4.3CVSS6AI score0.00241EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/01/13 3:55 p.m.12 views

CVE-2021-21613

Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to control TICS service response content...

6.3AI score0.00241EPSS
Exploits0References1
CVE
CVE
added 2021/01/13 3:55 p.m.72 views

CVE-2021-21613

CVE-2021-21613 affects the Jenkins TICS Plugin up to 2020.3.0.6. The issue is that the plugin does not escape TICS service responses, enabling cross-site scripting (XSS) if an attacker can control the response content. A fix is available: Jenkins TICS Plugin 2020.3.0.7 escapes or strips HTML in T...

6.1CVSS5.9AI score0.00241EPSS
Exploits0References1Affected Software1
AlpineLinux
AlpineLinux
added 2021/01/13 3:55 p.m.29 views

CVE-2021-21613

Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to control TICS service response content...

6.1CVSS2.8AI score0.00241EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2021/01/13 12:0 a.m.1 views

PT-2021-14656 · Jenkins · Jenkins Metrics Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins TICS Plugin versions 2020.3.0.6 and earlier Description: The issue results in a cross-site scripting XSS vulnerability, which is exploitable by attackers able to control TICS service response content. This occurs because the plugin do...

6.1CVSS5.9AI score0.00241EPSS
Exploits0References8
CNNVD
CNNVD
added 2021/01/13 12:0 a.m.1 views

CloudBees Jenkins TICS Plugin 跨站脚本漏洞

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site scripting...

6.1CVSS6.3AI score0.00241EPSS
Exploits0References4
Rows per page
Query Builder