CVSS 3.1
9.1 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NCVE-2021-21697
Critical (9.1) in jenkins jenkins. EPSS 1.6% chance of exploitation in the next 30 days. Fixed in org.jenkins-ci.main:jenkins-core 2.303.3, 2.319.
Jenkins 2.318 and earlier, LTS 2.303.2 and earlier allows any agent to read and write the contents of any build directory stored in Jenkins with very few restrictions.
Severity
- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jenkins:jenkins
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-cv2w-q8c3-xjv7 | Maven | org.jenkins-ci.main:jenkins-core | <2.303.3 | 2.303.3 |
| GHSA-cv2w-q8c3-xjv7 | Maven | org.jenkins-ci.main:jenkins-core | >=2.304 <2.319 | 2.319 |