CVE-2021-21684

Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause…

published October 6, 2021

CVSS
—
EPSS
1%
Percentile
69.0
In the wild
Unconfirmed
What it is

Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting (XSS) vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01242 · 69.0th percentile
Published
2021-10-06T22:10Z
EPSS history
Timeline
  • 06 OCT 22:10Z
    Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause…
    cvelistv5