Medium · 4.3 CVE-2021-21620 EUVD-2021-1259GHSA-4ffq-6g62-j4v4

Cross-Site Request Forgery in the Jenkins Claim plugin

Published Feb 24, 2021 · Updated Aug 3, 2024 · Assigned by jenkins

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Claim Plugin 2.18.1 and earlier allows attackers to change claims.

Vendor	Product	Affected	Fixed
Jenkins project	Jenkins Claim Plugin	unspecified – ≤ 2.18.1	—

Ecosystem	Package	Affected	Fixed	Record
Maven	org.jenkins-ci.plugins:claim	< 2.18.2	2.18.2	GHSA-4ffq-6g62-j4v4