CVE-2021-21617

2021-02-2416:15:14

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.0%

JSON

A cross-site request forgery (CSRF) vulnerability in Jenkins Configuration Slicing Plugin 1.51 and earlier allows attackers to apply different slice configurations.

CPENameOperatorVersion
configurationslicing-plugineqconfigurationslicing-1.41
configurationslicing-plugineqconfigurationslicing-1.39
configurationslicing-plugineqconfigurationslicing-1.51
configurationslicing-plugineqconfigurationslicing-1.50
configurationslicing-plugineqconfigurationslicing-1.40
configurationslicing-plugineqconfigurationslicing-1.46
configurationslicing-plugineqconfigurationslicing-1.37.1
configurationslicing-plugineqconfigurationslicing-1.45
configurationslicing-plugineqconfigurationslicing-1.44
configurationslicing-plugineqconfigurationslicing-1.43

Name	Operator	Version
configurationslicing-plugin	eq	configurationslicing-1.41
configurationslicing-plugin	eq	configurationslicing-1.39
configurationslicing-plugin	eq	configurationslicing-1.51
configurationslicing-plugin	eq	configurationslicing-1.50
configurationslicing-plugin	eq	configurationslicing-1.40
configurationslicing-plugin	eq	configurationslicing-1.46
configurationslicing-plugin	eq	configurationslicing-1.37.1
configurationslicing-plugin	eq	configurationslicing-1.45
configurationslicing-plugin	eq	configurationslicing-1.44
configurationslicing-plugin	eq	configurationslicing-1.43