Jenkins Claim Plugin (Jenkins Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2021-02-24. Vendor: Jenkins Project.

CVEs of Jenkins Claim Plugin

• CVE-2021-21620 - CVSS 4.3 (medium), 2021-02-24: A cross-site request forgery (CSRF) vulnerability in Jenkins Claim Plugin 2.18.1 and earlier allows attackers to change claims.
• CVE-2021-21619 - CVSS 5.4 (medium), 2021-02-24: Jenkins Claim Plugin 2.18.1 and earlier does not escape the user display name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by…