CSRF Vulnerability in Jenkins Xray - Test Management for Jira Plugin

CVE-2021-21652

What is CVE-2021-21652?

A cross-site request forgery vulnerability in Jenkins Xray - Test Management for Jira Plugin versions 2.4.0 and earlier can potentially allow an attacker to initiate requests on behalf of authenticated users. By leveraging this vulnerability, attackers may access a specified URL using stolen credentials, which can capture sensitive information like Jenkins credentials. This security issue raises significant concerns regarding access controls and user data protection within Jenkins environments.

References