CVE-2021-21629

A cross-site request forgery CSRF vulnerability in Jenkins Build With Parameters Plugin 1.5 and earlier allows attackers to build a project with attacker-specified parameters...

CVE-2021-21629

CVE-2021-21629: A CSRF vulnerability in Jenkins Build With Parameters Plugin 1.5 and earlier allows an attacker to trigger builds with attacker-specified parameters via endpoints that do not require POST; patch to 1.5.1 or later is indicated by sources (OSV/GHSA/NASL) as the fix. No exploitation ...

CVE-2021-21628: Improper Neutralization of Input During Web Page Generation

Jenkins Build With Parameters Plugin 1.5 and earlier does not escape parameter names and descriptions, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

CVE-2021-21629: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins Build With Parameters Plugin 1.5 and earlier allows attackers to build a project with attacker-specified parameters...