CVE-2021-21678: Jenkins project Jenkins SAML Plugin

Описание

Оригинално описание

Jenkins SAML Plugin 2.0.7 and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.

Засегнати продукти

• Jenkins project Jenkins SAML Plugin: 1.1.3 преди unspecified; unspecified до 2.0.7; 1.1.8; 2.0.3.1

История

Други уязвимости в Jenkins project Jenkins SAML Plugin

• 8.8CVE-2026-84668
• 7.5CVE-2025-64131

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-21678
• https://nvd.nist.gov/vuln/detail/CVE-2021-21678
• https://www.jenkins.io/security/advisory/2021-08-31/#SECURITY-2469
• http://www.openwall.com/lists/oss-security/2021/08/31/1