CVE-2021-21613

CVE-2021-21613 affects the Jenkins TICS Plugin up to 2020.3.0.6. The issue is that the plugin does not escape TICS service responses, enabling cross-site scripting (XSS) if an attacker can control the response content. A fix is available: Jenkins TICS Plugin 2020.3.0.7 escapes or strips HTML in T...

XSS vulnerability in tics

tics 2020.3.0.6 and earlier does not escape TICS service responses. This results in a cross-site scripting XSS vulnerability exploitable by attackers able to control TICS service response content. tics 2020.3.0.7 escapes TICS service responses, or strips HTML out, as appropriate...

CVE-2021-21613: Improper Neutralization of Input During Web Page Generation

Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to control TICS service response content...

CloudBees Jenkins TICS Plugin 跨站脚本漏洞

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site scripting...

PT-2021-14656 · Jenkins · Jenkins Metrics Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins TICS Plugin versions 2020.3.0.6 and earlier Description: The issue results in a cross-site scripting XSS vulnerability, which is exploitable by attackers able to control TICS service response content. This occurs because the plugin do...