CVE-2021-21683

The file browser in Jenkins 2.314 and earlier, LTS 2.303.1 and earlier may interpret some paths to files as absolute on Windows, resulting in a path traversal…

published October 6, 2021

CVSS
—
EPSS
2%
Percentile
82.2
In the wild
Unconfirmed
What it is

The file browser in Jenkins 2.314 and earlier, LTS 2.303.1 and earlier may interpret some paths to files as absolute on Windows, resulting in a path traversal vulnerability allowing attackers with Overall/Read permission (Windows controller) or Job/Workspace permission (Windows agents) to obtain the contents of arbitrary files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02173 · 82.2th percentile
Published
2021-10-06T22:10Z
EPSS history
Timeline
  • 06 OCT 22:10Z
    The file browser in Jenkins 2.314 and earlier, LTS 2.303.1 and earlier may interpret some paths to files as absolute on Windows, resulting in a path traversal…
    cvelistv5