CVE-2021-21668

CVE-2021-21668: vulnerability in Jenkins Scriptler Plugin

Published · Updated

Follow this CVE+ Monitor Jenkins Scriptler Plugin+ Monitor org.jenkins-ci.plugins:scriptler

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

25Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 76%
Jenkins Scriptler Plugin 3.1 and earlier does not escape script content, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Scriptler/Configure permission.
Affected products
Jenkins project · Jenkins Scriptler Plugin
Related CVEs — Jenkins Scriptler Plugin

In the same product, most dangerous first.

CVE-2021-21667—CVE-2021-21667EPSS 75.7%CVE-2021-21700—CVE-2021-21700EPSS 0.7%