From 557c4d7e8734d8d341ac1e9ba37372a8297d9ea8 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 27 Oct 2023 15:09:44 +0000 Subject: [PATCH] Publish GHSA-5c6c-w4c4-vgvx --- .../2022/01/GHSA-5c6c-w4c4-vgvx/GHSA-5c6c-w4c4-vgvx.json | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/advisories/github-reviewed/2022/01/GHSA-5c6c-w4c4-vgvx/GHSA-5c6c-w4c4-vgvx.json b/advisories/github-reviewed/2022/01/GHSA-5c6c-w4c4-vgvx/GHSA-5c6c-w4c4-vgvx.json index 40ddb0a525c..57992433ffd 100644 --- a/advisories/github-reviewed/2022/01/GHSA-5c6c-w4c4-vgvx/GHSA-5c6c-w4c4-vgvx.json +++ b/advisories/github-reviewed/2022/01/GHSA-5c6c-w4c4-vgvx/GHSA-5c6c-w4c4-vgvx.json @@ -1,17 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-5c6c-w4c4-vgvx", - "modified": "2022-12-13T18:00:58Z", + "modified": "2023-10-27T15:08:28Z", "published": "2022-01-06T18:45:09Z", "aliases": [ "CVE-2021-21668" ], "summary": "Stored XSS vulnerability in Jenkins Scriptler Plugin", - "details": "Scriptler Plugin 3.1 and earlier does not escape script content.\n\nThis results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Scriptler/Configure permission.\n\nScriptler Plugin 3.2 escapes script content.", + "details": "Jenkins Scriptler Plugin 3.1 and earlier does not escape script content.\n\nThis results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Scriptler/Configure permission.\n\nJenkins Scriptler Plugin 3.2 escapes script content.", "severity": [ { "type": "CVSS_V3", - "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], "affected": [ @@ -57,7 +57,7 @@ "cwe_ids": [ "CWE-79" ], - "severity": "HIGH", + "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2021-06-17T17:44:14Z", "nvd_published_at": "2021-06-16T14:15:00Z"