CVE-2021-21615

—

CVSS 3.1

5.3 medium

EPSS

<1%p58

Published

Jan 26, 2021 (Jan 26, 2021)

Modified

Jun 17, 2026

Description

Jenkins 2.275 and LTS 2.263.2 allows reading arbitrary files using the file browser for workspaces and archived artifacts due to a time-of-check to time-of-use (TOCTOU) race condition.

Vendors: jenkins
Products: jenkins
Weakness: CWE-367
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.