Skip to content
Sign in
Not rated

CVE-2021-21641 A cross-site request forgery (CSRF) vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers…

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds.

Affected products and versions

Product Affected versions Fixed in
Jenkins promoted builds Plugin 3.9 earliest → 3.9 No fix stated
Jenkins promoted builds Plugin 3.5 earliest → < 3.5.1 3.5.1

Other CVEs of Jenkins promoted builds Plugin

The 3 CVEs of Jenkins promoted builds Plugin →
CVE-2022-29045 Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not escape the name and description… Not rated CVE-2022-29049 Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not validate the names of… Not rated
Track this CVE