Lucene search
GoogleOSV:GHSA-RP4X-H577-CHVQHistoryMay 24, 2022 - 7:20 p.m.
Stored XSS vulnerability in Jenkins Active Choices Plugin
2022-05-2419:20:32
Google
osv.dev
4
0.001 Low
EPSS
Percentile
22.3%
Jenkins Active Choices Plugin 2.5.6 and earlier does not escape the parameter name of reactive parameters and dynamic reference parameters.
This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
Jenkins Active Choices Plugin 2.5.7 escapes references to parameter names.
Related
nvd
nvd
CVE-2021-21699
2021-11-12 11:15:08
cve
cve
CVE-2021-21699
2021-11-12 11:15:08
cvelist
cvelist
CVE-2021-21699
2021-11-12 10:35:15
osv
osv
CVE-2021-21699
2021-11-12 11:15:08
checkpoint_advisories
checkpoint_advisories
Jenkins Active Choices Plugin Cross-Site Scripting (CVE-2021-21699)
2022-11-20 00:00:00
prion
prion
Cross site scripting
2021-11-12 11:15:00
github
github
Stored XSS vulnerability in Jenkins Active Choices Plugin
2022-05-24 19:20:32