cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2021-21652,https://securityvulnerability.io/vulnerability/CVE-2021-21652,,"A cross-site request forgery (CSRF) vulnerability in Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.",Jenkins,Jenkins Xray - Test Management For Jira Plugin,7.1,HIGH,0.0006799999973736703,false,false,false,false,,false,false,2021-05-11T14:15:23.000Z,0
CVE-2021-21653,https://securityvulnerability.io/vulnerability/CVE-2021-21653,,"Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier does not perform a permission check in an HTTP endpoint, allowing with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.",Jenkins,Jenkins Xray - Test Management For Jira Plugin,4.3,MEDIUM,0.000539999979082495,false,false,false,false,,false,false,2021-05-11T14:15:23.000Z,0