Beveiligingsadvies

CVE-2021-21649

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-05-11 14:15:21
Laatst bijgewerkt 2024-08-03 18:16:23
Toegewezen door jenkins
CVSS-score geen score
Status PUBLISHED

Beschrijving

Jenkins Dashboard View Plugin 2.15 and earlier does not escape URLs referenced in Image Dashboard Portlets, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Configure permission.