Логотип exploitDog
bind:CVE-2021-21610
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-21610

Количество 4

Количество 4

redhat логотип

CVE-2021-21610

около 5 лет назад

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not implement any restrictions for the URL rendering a formatted preview of markup passed as a query parameter, resulting in a reflected cross-site scripting (XSS) vulnerability if the configured markup formatter does not prohibit unsafe elements (JavaScript) in markup.

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2021-21610

около 5 лет назад

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not implement any restrictions for the URL rendering a formatted preview of markup passed as a query parameter, resulting in a reflected cross-site scripting (XSS) vulnerability if the configured markup formatter does not prohibit unsafe elements (JavaScript) in markup.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2021-21610

около 5 лет назад

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not implement ...

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-7qf3-c2q8-69m3

больше 3 лет назад

Reflected XSS vulnerability in Jenkins markup formatter preview

CVSS3: 6.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2021-21610

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not implement any restrictions for the URL rendering a formatted preview of markup passed as a query parameter, resulting in a reflected cross-site scripting (XSS) vulnerability if the configured markup formatter does not prohibit unsafe elements (JavaScript) in markup.

CVSS3: 6.1
0%
Низкий
около 5 лет назад
nvd логотип
CVE-2021-21610

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not implement any restrictions for the URL rendering a formatted preview of markup passed as a query parameter, resulting in a reflected cross-site scripting (XSS) vulnerability if the configured markup formatter does not prohibit unsafe elements (JavaScript) in markup.

CVSS3: 6.1
0%
Низкий
около 5 лет назад
debian логотип
CVE-2021-21610

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not implement ...

CVSS3: 6.1
0%
Низкий
около 5 лет назад
github логотип
GHSA-7qf3-c2q8-69m3

Reflected XSS vulnerability in Jenkins markup formatter preview

CVSS3: 6.1
0%
Низкий
больше 3 лет назад

Уязвимостей на страницу