Package · Maven

org.jenkins-ci.plugins:dependency-track

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 8.8

CVE-2021-21633

CSRF vulnerability and in Jenkins OWASP Dependency-Track Plugin allow capturing credentials

A cross-site request forgery (CSRF) vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins.

Jenkins Project Jenkins OWASP Dependency-Track Plugin org.jenkins-ci.plugins:dependency-track Web / CMS Maven

Mar 30, 2021
Medium 6.5

CVE-2021-21632

Missing permission checks in Jenkins OWASP Dependency-Track Plugin allow capturing credentials

A missing permission check in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials stored in Jenkins.

Jenkins Project Jenkins OWASP Dependency-Track Plugin org.jenkins-ci.plugins:dependency-track Web / CMS Maven

Mar 30, 2021