Jenkins
Jenkins Security Advisory 2021-02-24
2021-02-24 Feb 24, 2021 Source: Vendor
Imported by the Jenkins advisory catcher from https://www.jenkins.io/security/advisory/2021-02-24/. 5 SECURITY issues listed. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.jenkins.io/security/advisory/2021-02-24/
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
7 lines
Showing 1–7 of 7 matching · clear filters
CVE-2021-21617
BR2021-0000-014272
SECURITY-2003
unclaimed
CSRF vulnerability in Configuration Slicing Plugin
Credited as Daniel Beck, CloudBees, Inc.
CVE-2021-21617
BR2021-0000-014273
SECURITY-2003
unclaimed
CSRF vulnerability in Configuration Slicing Plugin
Credited as Matt Sicker, CloudBees, Inc.
CVE-2021-21622
BR2021-0000-014274
SECURITY-2168
unclaimed
Stored XSS vulnerability in Artifact Repository Parameter Plugin
Credited as Son Nguyen (@s0nnguy3n_)
CVE-2021-21618
BR2021-0000-014275
SECURITY-2183
unclaimed
Stored XSS vulnerability in Repository Connector Plugin
Credited as Son Nguyen (@s0nnguy3n_)
CVE-2021-21621
BR2021-0000-014276
SECURITY-2150
unclaimed
Support bundles can include user session IDs in Support Core Plugin
Credited as Wadeck Follonier, CloudBees, Inc.
Acknowledgement
BR2021-0000-014277
SECURITY-2188
unclaimed
SECURITY-2188
Credited as Wadeck Follonier, CloudBees, Inc.
CVE-2021-21616
BR2021-0000-014278
SECURITY-2192
unclaimed
Stored XSS vulnerability in Active Choices Plugin
Credited as Wadeck Follonier, CloudBees, Inc.