CVE-2021-21666

CVE-2021-21666: vulnerability in Jenkins Kiuwan Plugin

Published · Updated

Follow this CVE+ Monitor Jenkins Kiuwan Plugin+ Monitor org.jenkins-ci.plugins:kiuwanJenkinsPlugin

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.2%
Jenkins Kiuwan Plugin 1.6.0 and earlier does not escape query parameters in an error message for a form validation endpoint, resulting in a reflected cross-site scripting (XSS) vulnerability.
Affected products
Jenkins project · Jenkins Kiuwan Plugin