CVE-2021-21609

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not correctly match requested URLs to the list of always accessible paths, allowing attackers without…

published January 13, 2021

CVSS
—
EPSS
1%
Percentile
70.7
In the wild
Unconfirmed
What it is

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not correctly match requested URLs to the list of always accessible paths, allowing attackers without Overall/Read permission to access some URLs as if they did have Overall/Read permission.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01323 · 70.7th percentile
Published
2021-01-13T15:55Z
EPSS history
Timeline
  • 13 JAN 15:55Z
    Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not correctly match requested URLs to the list of always accessible paths, allowing attackers without…
    cvelistv5