Package · Maven

org.jenkins-ci.plugins:dependency-track

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.5

CVE-2021-21632

Missing permission checks in Jenkins OWASP Dependency-Track Plugin allow capturing credentials

A missing permission check in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials stored in Jenkins.

Jenkins Project Jenkins OWASP Dependency-Track Plugin org.jenkins-ci.plugins:dependency-track Web / CMS Maven

Mar 30, 2021