CVE-2021-21677

Jenkins Code Coverage API Plugin 1.4.0 and earlier does not apply Jenkins JEP-200 deserialization protection to Java objects it deserializes from disk…

published August 31, 2021

CVSS
—
EPSS
2%
Percentile
82.5
In the wild
Unconfirmed
What it is

Jenkins Code Coverage API Plugin 1.4.0 and earlier does not apply Jenkins JEP-200 deserialization protection to Java objects it deserializes from disk, resulting in a remote code execution vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02213 · 82.5th percentile
Published
2021-08-31T13:50Z
EPSS history
Timeline
  • 31 AUG 13:50Z
    Jenkins Code Coverage API Plugin 1.4.0 and earlier does not apply Jenkins JEP-200 deserialization protection to Java objects it deserializes from disk…
    cvelistv5