CSRF Vulnerability in Jenkins Xray - Test Management for Jira Plugin

CVE-2021-21652

What is CVE-2021-21652?

A cross-site request forgery vulnerability in Jenkins Xray - Test Management for Jira Plugin versions 2.4.0 and earlier can potentially allow an attacker to initiate requests on behalf of authenticated users. By leveraging this vulnerability, attackers may access a specified URL using stolen credentials, which can capture sensitive information like Jenkins credentials. This security issue raises significant concerns regarding access controls and user data protection within Jenkins environments.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References