Product · Jenkins Project

Jenkins Extra Columns Plugin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.4

CVE-2021-21630 EPSS 69%

Stored XSS vulnerability in Jenkins Extra Columns Plugin

Jenkins Extra Columns Plugin 1.22 and earlier does not escape parameter values in the build parameters column, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

Jenkins Project Jenkins Extra Columns Plugin org.jenkins-ci.plugins:extra-columns Web / CMS Maven

Mar 30, 2021