UpHeron
All vulnerabilities

Servers and applications

CVE-2021-21690

Agent processes are able to completely bypass file path filtering by wrapping the file operation in an agent file path in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.

Severity
Critical 9.8
Published
4 Nov 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
2.303.3, 2.319
Sources
NVD

Affected software

SoftwareAffected versions
JenkinsServers and applications · cpe:a:jenkins:jenkins
  • Every version before 2.303.3
  • Every version before 2.319

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-21690
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-21690