VULNERABILITY INTELLIGENCE

CVE-2021-21690

CVSS score9.8 CRITICAL
EPSS probability2.53%
CISA KEVNot currently listed
Published2021-11-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Agent processes are able to completely bypass file path filtering by wrapping the file operation in an agent file path in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.

Weakness classification

  • nvd@nist.gov: CWE-22

Primary references