CVE-2021-22512CWE-352

Cross-Site Request Forgery (CSRF) vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin

published April 8, 2021

CVSS
—
EPSS
1%
Percentile
53.4
In the wild
Unconfirmed
What it is

Cross-Site Request Forgery (CSRF) vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow form validation without permission checks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00719 · 53.4th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2021-04-08T21:29Z
EPSS history
Timeline
  • 08 APR 21:29Z
    Cross-Site Request Forgery (CSRF) vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin
    cvelistv5