Xray Test Management For Jira

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-21653 May 11, 15:15 Maven MEDIUM PATCH This Month

Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier does not perform a permission check in an HTTP endpoint, allowing with Overall/Read permission to enumerate credentials IDs of. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Jenkins Atlassian Xray Test Management For Jira

NVD

CVSS 3.1

4.3

EPSS

0.9%

CVE-2021-21652 May 11, 15:15 Maven HIGH PATCH This Week

A cross-site request forgery (CSRF) vulnerability in Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Jenkins Atlassian Xray Test Management For Jira

NVD

CVSS 3.1

7.1

EPSS

0.6%

CVE-2021-21653 Maven

EPSS 1% CVSS 4.3

MEDIUM PATCH This Month

Information Disclosure Jenkins Atlassian +1

NVD

CVE-2021-21652 Maven

EPSS 1% CVSS 7.1

HIGH PATCH This Week

CSRF Jenkins Atlassian +1

NVD