CVE-2021-21699: vulnerability in Jenkins Active Choices Plugin
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
25Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 88%
Jenkins Active Choices Plugin 2.5.6 and earlier does not escape the parameter name of reactive parameters and dynamic reference parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
Affected products
Jenkins project · Jenkins Active Choices PluginRelated CVEs — Jenkins Active Choices Plugin
In the same product, most dangerous first.