CVE-2021-21644: Jenkins Config File Provider

Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days.

A cross-site request forgery (CSRF) vulnerability in Jenkins Config File Provider Plugin 3.7.0 and earlier allows attackers to delete configuration files corresponding to an attacker-specified ID.

Affected products

• Jenkins Config File Provider: up to and including 3.7.0

Published 2021-04-21. Last modified 2026-06-17.