PT-2021-14731
CVE-2021-21700
·
تاريخ النشر
2021-11-12
·
تاريخ التحديث
2023-11-22
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Jenkins Scriptler Plugin versions 3.3 and earlier
Description
The issue is related to a stored cross-site scripting (XSS) vulnerability. It occurs because the Jenkins Scriptler Plugin does not escape the name of scripts on the UI when asking to confirm their deletion. This makes it exploitable by attackers who are able to create Scriptler scripts.
Recommendations
For Jenkins Scriptler Plugin versions 3.3 and earlier, update to version 3.4 or later, which escapes the name of scripts on the UI when asking to confirm their deletion.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾