Lucene search

CVE-2021-21638

🗓️ 30 Mar 2021 12:10:16Reported by jenkinsType

Cross-site request forgery (CSRF) vulnerability in Jenkins Team Foundation Server Plugin

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 9
OSV	CSRF vulnerability in Jenkins Team Foundation Server Plugin allow capturing credentials	24 May 202217:45	–	osv
OSV	CVE-2021-21638	30 Mar 202112:16	–	osv
CNVD	CloudBees Jenkins Team Foundation Server Plugin Cross-Site Request Forgery Vulnerability	31 Mar 202100:00	–	cnvd
Github Security Blog	CSRF vulnerability in Jenkins Team Foundation Server Plugin allow capturing credentials	24 May 202217:45	–	github
Prion	Cross site request forgery (csrf)	30 Mar 202112:16	–	prion
Cvelist	CVE-2021-21638	30 Mar 202111:10	–	cvelist
AlpineLinux	CVE-2021-21638	30 Mar 202112:16	–	alpinelinux
NVD	CVE-2021-21638	30 Mar 202112:16	–	nvd
Tenable Nessus	Jenkins Plugins Multiple Vulnerabilities (Jenkins Security Advisory 2021-03-30)	30 Nov 202100:00	–	nessus

Nvd

Node

jenkins team_foundation_serverRange≤5.157.1jenkins

[
  {
    "product": "Jenkins Team Foundation Server Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "lessThanOrEqual": "5.157.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "unknown",
        "version": "next of 5.157.1",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
jenkins	www.jenkins.io/security/advisory/2021-03-30/
openwall	www.openwall.com/lists/oss-security/2021/03/30/1

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

30 Mar 2021 12:16Current

8.6High risk

Vulners AI Score8.6

CVSS26.8

CVSS38.8

EPSS0.00074

CWE-352