CVE-2021-21678

Jenkins SAML Plugin 2.0.7 and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins

published August 31, 2021

CVSS
—
EPSS
1%
Percentile
56.5
In the wild
Unconfirmed
What it is

Jenkins SAML Plugin 2.0.7 and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00810 · 56.5th percentile
Published
2021-08-31T13:50Z
EPSS history
Timeline
  • 31 AUG 13:50Z
    Jenkins SAML Plugin 2.0.7 and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins
    cvelistv5