CVE-2021-21673

CVE-2021-21673: vulnerability in Jenkins CAS Plugin

Published · Updated

Follow this CVE+ Monitor Jenkins CAS Plugin+ Monitor org.jenkins-ci.plugins:cas-plugin

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.6%
Jenkins CAS Plugin 1.6.0 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.
Affected products
Jenkins project · Jenkins CAS Plugin