CVE-2021-21674

A missing permission check in Jenkins requests-plugin Plugin 2.2.6 and earlier allows attackers with Overall/Read permission to view the list of pending requests...

CVE-2021-21674

A missing permission check in Jenkins requests-plugin Plugin 2.2.6 and earlier allows attackers with Overall/Read permission to view the list of pending requests...

CVE-2021-21674

CVE-2021-21674 affects Jenkins with the requests-plugin (versions 2.2.6 and earlier). The root cause is a missing permission check on an HTTP endpoint, allowing attackers with Overall/Read permission to view the list of pending requests. The issue is mitigated by updating to version 2.2.7 or late...