org.jenkins-ci.plugins:cron-shelve (=1.3) potentially affected by CVE-2020-2321 via org.jenkins-ci.plugins:shelve-project-plugin (=1.5)

org.jenkins-ci.plugins:shelve-project-plugin MAVEN version =1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:shelve-project-plugin and may be impacted: - org.jenkins-ci.plugins:cron-shelve =1.3 Source cves: CVE-2020-2321 Sourc...

CVE-2020-2321

creationtimestamp| type| source ---|---|--- 2020-12-03 18:25:21+00:00| seen| https://t.me/cibsecurity/17094...

CVE-2020-2321

A cross-site request forgery CSRF vulnerability in Jenkins Shelve Project Plugin 3.0 and earlier allows attackers to shelve, unshelve, or delete a project...