CVE-2021-21690

—

CVSS 3.1

9.8 critical

EPSS

3%p84

Published

Nov 4, 2021 (Nov 4, 2021)

Modified

Jun 17, 2026

Description

Agent processes are able to completely bypass file path filtering by wrapping the file operation in an agent file path in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.

Vendors: jenkins
Products: jenkins
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.5%)

In the news0 stories

No ingested article mentions this CVE yet.