diff --git a/advisories/github-reviewed/2021/06/GHSA-gchq-9r68-6jwv/GHSA-gchq-9r68-6jwv.json b/advisories/github-reviewed/2021/06/GHSA-gchq-9r68-6jwv/GHSA-gchq-9r68-6jwv.json index a563b5f21a4..10b5ad317ca 100644 --- a/advisories/github-reviewed/2021/06/GHSA-gchq-9r68-6jwv/GHSA-gchq-9r68-6jwv.json +++ b/advisories/github-reviewed/2021/06/GHSA-gchq-9r68-6jwv/GHSA-gchq-9r68-6jwv.json @@ -1,17 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-gchq-9r68-6jwv", - "modified": "2023-05-24T14:30:40Z", + "modified": "2023-10-27T14:31:46Z", "published": "2021-06-16T17:24:31Z", "aliases": [ "CVE-2021-21648" ], "summary": "Cross-Site Request Forgery in Jenkins Credentials Plugin", - "details": "Jenkins Credentials Plugin prior to 2.3.19, 2.3.15.1, 2.3.14.1, 2.3.13.1, 2.3.7.1, and 2.3.0.1 does not escape user-controlled information on a view it provides, resulting in a reflected cross-site scripting (XSS) vulnerability.\n\nCredentials Plugin 2.3.19, 2.3.15.1, 2.3.14.1, 2.3.13.1, 2.3.7.1, and 2.3.0.1 restricts the user-controlled information it provides to a safe subset.", + "details": "Jenkins Credentials Plugin prior to 2.3.19, 2.3.15.1, 2.3.14.1, 2.3.13.1, 2.3.7.1, and 2.3.0.1 does not escape user-controlled information on a view it provides, resulting in a reflected cross-site scripting (XSS) vulnerability.\n\nJenkins Credentials Plugin 2.3.19, 2.3.15.1, 2.3.14.1, 2.3.13.1, 2.3.7.1, and 2.3.0.1 restricts the user-controlled information it provides to a safe subset.", "severity": [ { "type": "CVSS_V3", - "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "affected": [ @@ -158,7 +158,7 @@ "cwe_ids": [ "CWE-79" ], - "severity": "HIGH", + "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2021-05-19T19:18:23Z", "nvd_published_at": "2021-05-11T15:15:00Z"