CVE-2021-21648

Publication date

2021-05-11 14:15:20

Family

jenkins

State

PUBLISHED

Description

Jenkins Credentials Plugin 2.3.18 and earlier does not escape user-controlled information on a view it provides, resulting in a reflected cross-site scripting (XSS) vulnerability.