Medium severity6.5NVD Advisory· Published Apr 8, 2021· Updated Jun 17, 2026
CVE-2021-22512
CVE-2021-22512
Description
Cross-Site Request Forgery (CSRF) vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow form validation without permission checks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.jenkins-ci.plugins:hp-application-automation-tools-pluginMaven | < 6.8 | 6.8 |
Affected products
2- cpe:2.3:a:microfocus:application_automation_tools:*:*:*:*:*:jenkins:*:*Range: <=6.7
Patches
Vulnerability mechanics
References
4News mentions
1- Jenkins Security Advisory 2021-04-07Jenkins Security Advisories · Apr 7, 2021