CVE-2021-21694

FilePath#toURI, FilePath#hasSymlink, FilePath#absolutize, FilePath#isDescendant, and FilePath#get*DiskSpace do not check any permissions in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.
Configurations

Configuration 1

cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*
cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*

Information

Published : 2021-11-04 05:15

Updated : 2021-11-09 07:08


NVD link : CVE-2021-21694

Mitre link : CVE-2021-21694

Products Affected
No products.
CWE