Files
CVEs-PoC/2021/CVE-2021-21676.md
2025-09-29 21:09:30 +02:00

705 B

CVE-2021-21676

Description

Jenkins requests-plugin Plugin 2.2.7 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to send test emails to an attacker-specified email address.

POC

Reference

No PoCs from references.

Github