Jenkins Project Jenkins Claim Plugin
2 CVEs affecting Jenkins Project Jenkins Claim Plugin. Latest disclosed: 2021-02-24. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-21619 | Medium | 5.4 | 2021-02-24 | Jenkins Claim Plugin 2.18.1 and earlier does not escape the user display name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by at… |
CVE-2021-21620 | Medium | 4.3 | 2021-02-24 | A cross-site request forgery (CSRF) vulnerability in Jenkins Claim Plugin 2.18.1 and earlier allows attackers to change claims. |