Lucene search
GoogleOSV:GHSA-RRVG-2C69-P9RFHistoryJun 16, 2021 - 5:28 p.m.
CSRF vulnerability in Jenkins Xray - Test Management for Jira Plugin allows capturing credentials
2021-06-1617:28:58
Google
osv.dev
8
0.001 Low
EPSS
Percentile
29.9%
Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier does not require POST requests for a connection test method, resulting in a cross-site request forgery (CSRF) vulnerability.
This vulnerability allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Jenkins Xray - Test Management for Jira Plugin 2.4.1 requires POST requests for the affected connection test method.
Related
osv
osv
CVE-2021-21652
2021-05-11 15:15:08
cvelist
cvelist
CVE-2021-21652
2021-05-11 14:15:23
cve
cve
CVE-2021-21652
2021-05-11 15:15:08
github
github
prion
prion
Cross site request forgery (csrf)
2021-05-11 15:15:00
nvd
nvd
CVE-2021-21652
2021-05-11 15:15:08
