Security Advisory

CVE-2021-21684

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-10-06 22:10:14

Last updated 2024-08-03 18:23:28

Assigner jenkins

CVSS score not scored

State PUBLISHED

Description

Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting (XSS) vulnerability.

← Browse all CVEs View on cve.org ↗