High severity7.1NVD Advisory· Published May 11, 2021· Updated Jun 17, 2026
CVE-2021-21655
CVE-2021-21655
Description
A cross-site request forgery (CSRF) vulnerability in Jenkins P4 Plugin 1.11.4 and earlier allows attackers to connect to an attacker-specified Perforce server using attacker-specified username and password.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.jenkins-ci.plugins:p4Maven | < 1.11.5 | 1.11.5 |
Affected products
3- Range: unspecified
Patches
Vulnerability mechanics
References
4- github.com/advisories/GHSA-3rj3-qp2j-4fj2ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2021-21655ghsaADVISORY
- www.jenkins.io/security/advisory/2021-05-11/nvdVendor AdvisoryWEB
- github.com/jenkinsci/p4-plugin/commit/6b0237b04c985987460e31987d3cb314afa1ead6ghsaWEB
News mentions
1- Jenkins Security Advisory 2021-05-11Jenkins Security Advisories · May 11, 2021