CVE-2021-21611

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape display names and IDs of item types shown on the New Item page, resulting in a stored…

published January 13, 2021

CVSS
—
EPSS
1%
Percentile
63.7
In the wild
Unconfirmed
What it is

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape display names and IDs of item types shown on the New Item page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to specify display names or IDs of item types.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01041 · 63.7th percentile
Published
2021-01-13T15:55Z
EPSS history
Timeline
  • 13 JAN 15:55Z
    Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape display names and IDs of item types shown on the New Item page, resulting in a stored…
    cvelistv5