UpHeron
All vulnerabilities

Servers and applications

CVE-2021-21697

Jenkins 2.318 and earlier, LTS 2.303.2 and earlier allows any agent to read and write the contents of any build directory stored in Jenkins with very few restrictions.

Severity
Critical 9.1
Published
4 Nov 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
JenkinsServers and applications · cpe:a:jenkins:jenkins
  • Every version up to 2.303.2
  • Every version up to 2.318

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-21697
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-21697