Archive

11 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /11 June 2021 →

All Critical High Medium Low Exploited only Public exploit

43 results · Clear filters · Feed

High 7.1

CVE-2021-21655

Cross-Site Request Forgery in Jenkins P4 Plugin

A cross-site request forgery (CSRF) vulnerability in Jenkins P4 Plugin 1.11.4 and earlier allows attackers to connect to an attacker-specified Perforce server using attacker-specified username and password.

Jenkins Project Jenkins P4 Plugin org.jenkins-ci.plugins:p4 Web / CMS Maven

May 11, 2021
High 7.1

CVE-2021-21656

XML external entity (XXE) attacks in Jenkins Xcode integration Plugin

Jenkins Xcode integration Plugin 2.0.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Jenkins Project Jenkins Xcode integration Plugin org.jenkins-ci.plugins:xcode-plugin Web / CMS Maven

May 11, 2021
High 7.1

CVE-2021-21652

CSRF vulnerability in Jenkins Xray - Test Management for Jira Plugin allows capturing credentials

A cross-site request forgery (CSRF) vulnerability in Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing …

Jenkins Project Jenkins Xray - Test Management for Jira Plugin org.jenkins-ci.plugins:xray-connector Web / CMS Maven

May 11, 2021