CVE-2021-21648
11.05.2021, 15:15
Jenkins Credentials Plugin 2.3.18 and earlier does not escape user-controlled information on a view it provides, resulting in a reflected cross-site scripting (XSS) vulnerability.
| Vendor | Product | Version |
|---|---|---|
| jenkins | credentials | 𝑥 ≤ 2.3.18 |
𝑥
= Vulnerable software versions