CVE-2021-21616: vulnerability in Jenkins Active Choices Plugin
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
25Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 76%
Jenkins Active Choices Plugin 2.5.2 and earlier does not escape reference parameter values, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
Affected products
Jenkins project · Jenkins Active Choices PluginRelated CVEs — Jenkins Active Choices Plugin
In the same product, most dangerous first.