Jenkins
Jenkins Security Advisory 2021-02-24
2021-02-24 Feb 24, 2021 Source: Vendor
Imported by the Jenkins advisory catcher from https://www.jenkins.io/security/advisory/2021-02-24/. 5 SECURITY issues listed. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.jenkins.io/security/advisory/2021-02-24/
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
7 lines
Showing 1–7 of 7
CVE-2021-21617
BR2021-0000-014272
SECURITY-2003
unclaimed
CSRF vulnerability in Configuration Slicing Plugin
Credited as Daniel Beck, CloudBees, Inc.
CVE-2021-21617
BR2021-0000-014273
SECURITY-2003
unclaimed
CSRF vulnerability in Configuration Slicing Plugin
Credited as Matt Sicker, CloudBees, Inc.
CVE-2021-21622
BR2021-0000-014274
SECURITY-2168
unclaimed
Stored XSS vulnerability in Artifact Repository Parameter Plugin
Credited as Son Nguyen (@s0nnguy3n_)
CVE-2021-21618
BR2021-0000-014275
SECURITY-2183
unclaimed
Stored XSS vulnerability in Repository Connector Plugin
Credited as Son Nguyen (@s0nnguy3n_)
CVE-2021-21621
BR2021-0000-014276
SECURITY-2150
unclaimed
Support bundles can include user session IDs in Support Core Plugin
Credited as Wadeck Follonier, CloudBees, Inc.
Acknowledgement
BR2021-0000-014277
SECURITY-2188
unclaimed
SECURITY-2188
Credited as Wadeck Follonier, CloudBees, Inc.
CVE-2021-21616
BR2021-0000-014278
SECURITY-2192
unclaimed
Stored XSS vulnerability in Active Choices Plugin
Credited as Wadeck Follonier, CloudBees, Inc.