CVE-2021-21687 PUBLISHED

Jenkins LTS 2.303.2 and earlier does not check agent-to-controller access to create symbolic links when unarchiving a symbolic link in FilePath#untar.

EPSS 0.27% · 50.4th percentile

Risk Scores

EPSS Score
0.27%
50.4th percentile

Affected Products

VendorProductVersions
Bitnamijenkins0
Bitnamijenkins0

Timeline

References

Open in Interactive Console →