vulnerability

Red Hat OpenShift: CVE-2021-21603: jenkins: XSS vulnerability in notification bar

Name: Red Hat OpenShift: CVE-2021-21603: jenkins: XSS vulnerability in notification bar
Creator: Red Hat
Published: 2021-01-13T00:00:00.000Z
Keywords: CVE, CWE-79, Red Hat OpenShift, 2021, 21603, jenkins, linuxrpm-upgrade-conmon, linuxrpm-upgrade-jenkins, linuxrpm-upgrade-machine-config-daemon, linuxrpm-upgrade-openshift, linuxrpm-upgrade-openshift-ansible, linuxrpm-upgrade-openshift-clients, linuxrpm-upgrade-runc, Severity 4

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:S/C:N/I:P/A:N)

Published

Jan 13, 2021

Added

Feb 19, 2021

Modified

Mar 30, 2026

Description

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape notification bar response contents, resulting in a cross-site scripting (XSS) vulnerability.

Solutions

linuxrpm-upgrade-conmonlinuxrpm-upgrade-jenkinslinuxrpm-upgrade-machine-config-daemonlinuxrpm-upgrade-openshiftlinuxrpm-upgrade-openshift-ansiblelinuxrpm-upgrade-openshift-clientslinuxrpm-upgrade-runc

References

CVE-2021-21603
https://attackerkb.com/topics/CVE-2021-21603
CWE-79
EUVD-EUVD-2022-3324
REDHAT-RHSA-2021:0423
REDHAT-RHSA-2021:0429
REDHAT-RHSA-2021:0637
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-3324

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report