Description

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows attackers with permission to create or configure various objects to inject crafted content into Old Data Monitor that results in the instantiation of potentially unsafe objects once discarded by an administrator.

Remediation

References

CVE-2021-21604

Related Vulnerabilities

MySQL CVE-2020-2627 Vulnerability (CVE-2020-2627)

WordPress Plugin Spotlight Cross-Site Scripting (4.7)

MyBB Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-9403)

OpenSSL Out-of-bounds Write Vulnerability (CVE-2022-2274)

WordPress 4.7 Multiple Vulnerabilities (4.7)

Severity

High

Classification

CVE-2021-21604 CWE-502 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities