Lucene search

CVE-2021-21633

🗓️ 30 Mar 2021 12:10:16Reported by jenkinsType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 60 Views

A CSRF vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers to capture credentials

Reporter	Title	Published	Views	Family All 10
Prion	Cross site request forgery (csrf)	30 Mar 202112:16	–	prion
Cvelist	CVE-2021-21633	30 Mar 202111:10	–	cvelist
Vulnrichment	CVE-2021-21633	30 Mar 202111:10	–	vulnrichment
Github Security Blog	CSRF vulnerability and in Jenkins OWASP Dependency-Track Plugin allow capturing credentials	24 May 202217:45	–	github
OSV	CSRF vulnerability and in Jenkins OWASP Dependency-Track Plugin allow capturing credentials	24 May 202217:45	–	osv
OSV	CVE-2021-21633	30 Mar 202112:16	–	osv
NVD	CVE-2021-21633	30 Mar 202112:16	–	nvd
AlpineLinux	CVE-2021-21633	30 Mar 202112:16	–	alpinelinux
CNVD	CloudBees Jenkins OWASP Dependency-Track Plugin Cross-Site Request Forgery Vulnerability	31 Mar 202100:00	–	cnvd
Tenable Nessus	Jenkins Plugins Multiple Vulnerabilities (Jenkins Security Advisory 2021-03-30)	30 Nov 202100:00	–	nessus

Nvd

Node

jenkins owasp_dependency-trackRange≤3.1.0jenkins

[
  {
    "product": "Jenkins OWASP Dependency-Track Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "1.1.0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "3.1.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2021/03/30/1
jenkins	www.jenkins.io/security/advisory/2021-03-30/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

30 Mar 2021 12:16Current

8.6High risk

Vulners AI Score8.6

CVSS26.8

CVSS38.8

EPSS0.00088

SSVC

CWE-352