CVE-2021-21618
24.02.2021, 16:15
Jenkins Repository Connector Plugin 2.0.2 and earlier does not escape parameter names and descriptions for past builds, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
| Vendor | Product | Version |
|---|---|---|
| jenkins | repository_connector | 𝑥 ≤ 2.0.2 |
𝑥
= Vulnerable software versions