ZeroHour

CVE-2021-21678

CVSS 3.1
8.8 high
EPSS
<1%p55
Published
()
Modified
Description

Jenkins SAML Plugin 2.0.7 and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.

Vendors
jenkins
Products
saml
Weakness
CWE-352
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.