CVE-2021-21679: Jenkins Azure Ad

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Jenkins Azure AD Plugin 179.vf6841393099e and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.

Affected products

• Jenkins Azure Ad: from 164.v5b48baa961d2, up to and including 179.vf6841393099e

Published 2021-08-31. Last modified 2026-06-17.