Claim

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-21620 Maven MEDIUM PATCH This Month

A cross-site request forgery (CSRF) vulnerability in Jenkins Claim Plugin 2.18.1 and earlier allows attackers to change claims. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Jenkins Claim

NVD

CVSS 3.1

4.3

EPSS

1.6%

CVE-2021-21619 Maven MEDIUM PATCH This Month

Jenkins Claim Plugin 2.18.1 and earlier does not escape the user display name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers who are able to control the. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Jenkins XSS Claim

NVD

CVSS 3.1

5.4

EPSS

9.4%

CVE-2021-21620 Maven

EPSS 2% CVSS 4.3

MEDIUM PATCH This Month

CSRF Jenkins Claim

NVD

CVE-2021-21619 Maven

EPSS 9% CVSS 5.4

MEDIUM PATCH This Month

Jenkins XSS Claim

NVD