CVE-2021-21679 is a vulnerability in Jenkins Azure Ad
Published on August 31, 2021
Jenkins Azure AD Plugin 179.vf6841393099e and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.
Products Associated with CVE-2021-21679
Want to know whenever a new CVE is published for Jenkins Azure Ad? stack.watch will email you.
Affected Versions
Jenkins project Jenkins Azure AD Plugin:- Version 164.v5b48baa961d2 and below unspecified is affected.
- Version unspecified, <= 179.vf6841393099e is affected.
Exploit Probability
EPSS
0.06%
Percentile
17.02%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.