Package · Maven

org.jenkins-ci.plugins:tfs

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.8

CVE-2021-21638

CSRF vulnerability in Jenkins Team Foundation Server Plugin allow capturing credentials

A cross-site request forgery (CSRF) vulnerability in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credent…

Jenkins Project Jenkins Team Foundation Server Plugin org.jenkins-ci.plugins:tfs Web / CMS Maven

Mar 30, 2021