CVE-2021-21620 A cross-site request forgery (CSRF) vulnerability in Jenkins Claim Plugin 2.18.1 and earlier allows attackers to…

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Claim Plugin 2.18.1 and earlier allows attackers to change claims.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Jenkins Claim Plugin 2.18	premières → 2.18.1	Pas de correctif indiqué

Autres CVE de Jenkins Claim Plugin

Les 2 CVE de Jenkins Claim Plugin →

CVE-2021-21619 Jenkins Claim Plugin 2.18.1 and earlier does not escape the user display name, resulting in a stored cross-site… Non notée