← CVE Intelligence

CVE-2021-21648

Jenkins project / Jenkins Credentials Plugin PUBLISHED

Description (CNA)

Jenkins Credentials Plugin 2.3.18 and earlier does not escape user-controlled information on a view it provides, resulting in a reflected cross-site scripting (XSS) vulnerability.

Affected (CNA)

Vendor / productVersions
Jenkins project / Jenkins Credentials Pluginaffected unspecified through 2.3.18; unaffected 2.3.0.1; unaffected 2.3.7.1; unaffected 2.3.14.1; unaffected 2.3.13.1; unaffected 2.3.15.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.