<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>CVE Daily – Dependency-Track (High+Critical)</title>
  <link>https://cvedaily.com/pages/tags/dependency-track.html</link>
  <atom:link href="https://cvedaily.com/feed-tags/dependency-track-severe.xml" rel="self" type="application/rss+xml"/>
  <description>CVE Daily – Dependency-Track (High+Critical)</description>
  <language>en</language>
  <lastBuildDate>Wed, 03 Jun 2026 21:27:04 +0000</lastBuildDate>
  <item>
    <title>[High] CVE-2021-21633 – A cross-site request forgery (CSRF) vulnerability in Jenkins OWASP Dependency-Tr...</title>
    <link>https://nvd.nist.gov/vuln/detail/CVE-2021-21633</link>
    <guid isPermaLink="true">https://nvd.nist.gov/vuln/detail/CVE-2021-21633</guid>
    <pubDate>Tue, 30 Mar 2021 12:16:10 +0000</pubDate>
    <description>
<![CDATA[
  <p><strong><span class="badge risk high">High</span> CVE-2021-21633</strong></p>
  <p>A cross-site request forgery (CSRF) vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins.</p>
  <p><strong>CVSS:</strong> 8.8 · <strong>CWE:</strong> CWE-352</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2021-21633">View on NVD</a></p>
]]>
    </description>
  </item>
</channel>
</rss>
