VDB
CVE-2021-21698
CVE-2021-21698
PUBLISHED
Reported by jenkins · Published November 4, 2021
Jenkins Subversion Plugin 2.15.0 and earlier does not restrict the name of a file when looking up a subversion key file on the controller from an agent.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Jenkins project | Jenkins Subversion Plugin | unspecified |
| Jenkins project | Jenkins Subversion Plugin | * |
Timeline
- Nov 4, 2021 CVE Published
- Nov 4, 2021 PoC Published
- Nov 5, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 26, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- Jun 18, 2022 EPSS Score
- Oct 10, 2022 EPSS Score
- Dec 16, 2022 CVE Updated
- Jan 30, 2023 EPSS Score
- Mar 28, 2023 EPSS Score
- Jul 18, 2023 EPSS Score
References
- x_refsource_CONFIRM
- [oss-security] 20211104 Multiple vulnerabilities in Jenkins and Jenkins plugins mailing-listx_refsource_MLIST