diff --git a/advisories/github-reviewed/2022/01/GHSA-p479-rwhp-rwjx/GHSA-p479-rwhp-rwjx.json b/advisories/github-reviewed/2022/01/GHSA-p479-rwhp-rwjx/GHSA-p479-rwhp-rwjx.json index fb7c9f74951..11b3c074c2b 100644 --- a/advisories/github-reviewed/2022/01/GHSA-p479-rwhp-rwjx/GHSA-p479-rwhp-rwjx.json +++ b/advisories/github-reviewed/2022/01/GHSA-p479-rwhp-rwjx/GHSA-p479-rwhp-rwjx.json @@ -1,17 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-p479-rwhp-rwjx", - "modified": "2022-12-13T17:59:48Z", + "modified": "2023-10-27T15:19:06Z", "published": "2022-01-06T18:45:29Z", "aliases": [ "CVE-2021-21667" ], "summary": "Stored XSS vulnerability in Jenkins Scriptler Plugin", - "details": "Scriptler Plugin 3.2 and earlier does not escape parameter names shown in job configuration forms.\n\nThis results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Scriptler/Configure permission.\n\nScriptler Plugin 3.3 escapes parameter names shown in job configuration forms.", + "details": "Jenkins Scriptler Plugin 3.2 and earlier does not escape parameter names shown in job configuration forms.\n\nThis results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Scriptler/Configure permission.\n\nJenkins Scriptler Plugin 3.3 escapes parameter names shown in job configuration forms.", "severity": [ { "type": "CVSS_V3", - "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], "affected": [ @@ -57,7 +57,7 @@ "cwe_ids": [ "CWE-79" ], - "severity": "HIGH", + "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2021-06-17T17:43:32Z", "nvd_published_at": "2021-06-16T14:15:00Z"