CVE-2021-21644 is a vulnerability in Jenkins Config File Provider
Published on April 21, 2021
A cross-site request forgery (CSRF) vulnerability in Jenkins Config File Provider Plugin 3.7.0 and earlier allows attackers to delete configuration files corresponding to an attacker-specified ID.
Products Associated with CVE-2021-21644
Want to know whenever a new CVE is published for Jenkins Config File Provider? stack.watch will email you.
Affected Versions
Jenkins project Jenkins Config File Provider Plugin:- Version unspecified, <= 3.7.0 is affected.
Exploit Probability
EPSS
0.13%
Percentile
31.58%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.