Medium severity4.3NVD Advisory· Published Apr 7, 2021· Updated Jun 17, 2026
CVE-2021-21641
CVE-2021-21641
Description
A cross-site request forgery (CSRF) vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.jenkins-ci.plugins:promoted-buildsMaven | < 3.9.1 | 3.9.1 |
Affected products
3- Range: unspecified
Patches
Vulnerability mechanics
References
5- www.openwall.com/lists/oss-security/2021/04/07/2nvdMailing ListThird Party AdvisoryWEB
- github.com/advisories/GHSA-5cxw-8v65-76vfghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2021-21641ghsaADVISORY
- www.jenkins.io/security/advisory/2021-04-07/nvdVendor AdvisoryWEB
- github.com/jenkinsci/promoted-builds-plugin/commit/46086a74891d620042c3d28a19cba3510c5dbf6aghsaWEB
News mentions
1- Jenkins Security Advisory 2021-04-07Jenkins Security Advisories · Apr 7, 2021