Jenkins Project Jenkins Extra Columns Plugin vulnerabilities

1 known vulnerability affecting jenkins_project/jenkins_extra_columns_plugin.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2021-21630MEDIUMCVSS 5.4≥ unspecified, ≤ 1.222021-03-30

CVE-2021-21630 [MEDIUM] CWE-79 CVE-2021-21630: Jenkins Extra Columns Plugin 1.22 and earlier does not escape parameter values in the build paramete Jenkins Extra Columns Plugin 1.22 and earlier does not escape parameter values in the build parameters column, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.