VDB

CVE-2021-21690

CVE-2021-21690 PUBLISHED

Agent processes are able to completely bypass file path filtering by wrapping the file operation in an agent file path in Jenkins LTS 2.303.2 and earlier.

EPSS 0.50% · 66.4th percentile

Risk Scores

EPSS Score
0.50%
66.4th percentile

Affected Products

VendorProductVersions
Bitnamijenkins0
Bitnamijenkins0

Timeline

  • Nov 4, 2021 CVE Published
  • Nov 5, 2021 EPSS Score
  • Dec 31, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 24, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • Apr 21, 2022 EPSS Score
  • Jun 16, 2022 EPSS Score
  • Aug 11, 2022 EPSS Score
  • Dec 1, 2022 EPSS Score
  • Jan 25, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›