Skip to content
OpenAdvisories

Package · Maven

org.jenkins-ci.plugins:extra-columns

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.4
    CVE-2021-21630 EPSS 69%

    Stored XSS vulnerability in Jenkins Extra Columns Plugin

    Jenkins Extra Columns Plugin 1.22 and earlier does not escape parameter values in the build parameters column, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

    Jenkins Project Jenkins Extra Columns Plugin org.jenkins-ci.plugins:extra-columns Web / CMS Maven
  • Medium 5.4
    CVE-2016-3101

    Jenkins Extra Columns Plugin allows Cross-Site Scripting (XSS)

    Cross-site scripting (XSS) vulnerability in the Extra Columns plugin before 1.17 in Jenkins allows remote attackers to inject arbitrary web script or HTML by leveraging failure to filter tool tips through the configured markup formatter.

    org.jenkins-ci.plugins:extra-columns Maven