CVE-2021-21684

Description

Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting (XSS) vulnerability.

CVSS Metrics

• v3.1•MEDIUM•Score: 6.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
• v2.0•MEDIUM•Score: 4.3AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS Trends

Current EPSS score: 0.60%• Percentile: 70%

Techniques & Countermeasures

• CWE-116•Improper Encoding or Escaping of Output

  The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.

Affected Systems

• jenkins project•jenkins git plugin

  ≥ unspecified, ≤ 4.8.2

• jenkins•git

  ≤ 4.8.2

• org.jenkins-ci.plugins•git

  < 4.8.3

References (5)

• https://www.jenkins.io/security/advisory/2021-10-06/#SECURITY-2499
• http://www.openwall.com/lists/oss-security/2021/10/06/1
• https://nvd.nist.gov/vuln/detail/CVE-2021-21684
• https://github.com/jenkinsci/git-plugin/commit/5474cc942bfba60927be629ff47fb41c38c66741
• https://github.com/jenkinsci/git-plugin