CVE-2021-21617

CVE-2021-21617 concerns a CSRF vulnerability in the Jenkins Configuration Slicing Plugin (versions 1.51 and earlier). The underlying issue is that the plugin’s form submission endpoint did not require POST, allowing an attacker to apply different slice configurations to attacker‑specified jobs. A...