CVE-2021-22510: XSS
Micro Focus Application Automation Tools Plugin 6.7 and earlier does not escape user input in a form validation response.
This results in a reflected cross-site scripting (XSS) vulnerability.
Micro Focus Application Automation Tools Plugin 6.8 escapes user input in the affected form validation response.
A security hardening since Jenkins 2.275 and LTS 2.263.2 prevents exploitation of this vulnerability.
Other sources
Reflected XSS vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects all version 6.7 and earlier versions.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-22510?
CVE-2021-22510 is a reflected XSS vulnerability in the Micro Focus Application Automation Tools Plugin for Jenkins.
How does CVE-2021-22510 affect the Micro Focus Application Automation Tools Plugin?
CVE-2021-22510 affects all versions 6.7 and earlier of the Micro Focus Application Automation Tools Plugin for Jenkins.
What is the severity of CVE-2021-22510?
CVE-2021-22510 has a severity rating of medium.
How can I fix CVE-2021-22510?
To fix CVE-2021-22510, you should update the Micro Focus Application Automation Tools Plugin to a version later than 6.7.
Where can I find more information about CVE-2021-22510?
You can find more information about CVE-2021-22510 in the Jenkins Security Advisory at [https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2175](https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2175).