Junglewise Threat Intelligence

CVE-2021-21679: Jenkins Azure AD Plugin allows bypassing CSRF protection for any URL

CVE-2021-21679 · Severity: low · CVSS 3.1 · Published 2022-05-24

Technologies: org.jenkins-ci.plugins:azure-ad (Maven). Vendors: Maven.

Executive brief

Jenkins Azure AD Plugin allows bypassing CSRF protection for any URL

Affected products

  • Maven org.jenkins-ci.plugins:azure-ad

Related threats