CVE-2021-21620 A cross-site request forgery (CSRF) vulnerability in Jenkins Claim Plugin 2.18.1 and earlier allows attackers to…

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Claim Plugin 2.18.1 and earlier allows attackers to change claims.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Claim Plugin 2.18	earliest → 2.18.1	No fix stated

Other CVEs of Jenkins Claim Plugin

The 2 CVEs of Jenkins Claim Plugin →

CVE-2021-21619 Jenkins Claim Plugin 2.18.1 and earlier does not escape the user display name, resulting in a stored cross-site… Not rated