GHSA-xmw5-45v9-pxqx

GitHub Security Advisory

XSS vulnerability in Jenkins TICS Plugin

✓ GitHub Reviewed MODERATE Has CVE

Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses.

This results in a cross-site scripting (XSS) vulnerability exploitable by attackers able to control TICS service response content.

Jenkins TICS Plugin 2020.3.0.7 escapes TICS service responses, or strips HTML out, as appropriate.

Maven io.jenkins.plugins:tics

Affected versions: 0 (fixed in 2020.3.0.7)

CVE-2021-21613

GHSA ID

GHSA-xmw5-45v9-pxqx

Published

May 24, 2022 5:39 PM

Last Modified

October 27, 2023 1:22 PM

CVSS Score

5.0 /10

Primary Ecosystem

Maven

Primary Package

io.jenkins.plugins:tics

GitHub Reviewed

✓ Yes

Last updated: August 27, 2025 6:31 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.