CVE-2021-21630

2021-03-3012:16:10

Google

osv.dev

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%

JSON

Jenkins Extra Columns Plugin 1.22 and earlier does not escape parameter values in the build parameters column, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

CPENameOperatorVersion
extra-columns-plugineqextra-columns-1.5
extra-columns-plugineqextra-columns-1.2
extra-columns-plugineqextra-columns-1.0
extra-columns-plugineqextra-columns-1.13
extra-columns-plugineqextra-columns-1.21
extra-columns-plugineqextra-columns-1.16
extra-columns-plugineqextra-columns-1.9
extra-columns-plugineqextra-columns-1.14
extra-columns-plugineqextra-columns-1.19
extra-columns-plugineqextra-columns-1.18

Name	Operator	Version
extra-columns-plugin	eq	extra-columns-1.5
extra-columns-plugin	eq	extra-columns-1.2
extra-columns-plugin	eq	extra-columns-1.0
extra-columns-plugin	eq	extra-columns-1.13
extra-columns-plugin	eq	extra-columns-1.21
extra-columns-plugin	eq	extra-columns-1.16
extra-columns-plugin	eq	extra-columns-1.9
extra-columns-plugin	eq	extra-columns-1.14
extra-columns-plugin	eq	extra-columns-1.19
extra-columns-plugin	eq	extra-columns-1.18