Jenkins Project Jenkins Xray Test Management For Jira Plugin vulnerabilities

2 vulnerabilities

Known vulnerabilities in Jenkins Project Jenkins Xray Test Management For Jira Plugin, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.1CVE-2021-21652jenkins projectjenkins xray - test management for jira plugin+2
EPSS score
0.64%
A cross-site request forgery (CSRF) vulnerability in Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.4.3CVE-2021-21653jenkins projectjenkins xray - test management for jira plugin+2
EPSS score
0.86%
Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier does not perform a permission check in an HTTP endpoint, allowing with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.