Skip to content
Sign in
Not rated

CVE-2021-21678 Jenkins SAML Plugin 2.0.7 and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target…

Description

Jenkins SAML Plugin 2.0.7 and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.

Affected products and versions

Product Affected versions Fixed in
Jenkins SAML Plugin 2.0 earliest → 2.0.7 2.0.3.1
Jenkins SAML Plugin 1.1 1.1.3 → < 1.1.8 1.1.8

Other CVEs of Jenkins SAML Plugin

The 3 CVEs of Jenkins SAML Plugin →
CVE-2026-84668 Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider metadata file… 8.8 High CVE-2025-64131 Jenkins SAML Plugin 4.583.vc68232f7018a_ and earlier does not implement a replay cache, allowing attackers able to… 7.5 High
Track this CVE