CVE-2021-21677

2021-08-3114:15:25

Google

osv.dev

7.8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.0%

JSON

Jenkins Code Coverage API Plugin 1.4.0 and earlier does not apply Jenkins JEP-200 deserialization protection to Java objects it deserializes from disk, resulting in a remote code execution vulnerability.

CPENameOperatorVersion
code-coverage-api-plugineqcode-coverage-api-1.0.6
code-coverage-api-plugineqcode-coverage-api-1.0.8
code-coverage-api-plugineqcode-coverage-api-1.0.7
code-coverage-api-plugineqcode-coverage-api-1.1.0
code-coverage-api-plugineqcode-coverage-api-1.3.1
code-coverage-api-plugineqcode-coverage-api-1.1.5
code-coverage-api-plugineqcode-coverage-api-1.0.0
code-coverage-api-plugineqcode-coverage-api-1.1.1
code-coverage-api-plugineqcode-coverage-api-1.0.12
code-coverage-api-plugineqcode-coverage-api-1.0.13

Name	Operator	Version
code-coverage-api-plugin	eq	code-coverage-api-1.0.6
code-coverage-api-plugin	eq	code-coverage-api-1.0.8
code-coverage-api-plugin	eq	code-coverage-api-1.0.7
code-coverage-api-plugin	eq	code-coverage-api-1.1.0
code-coverage-api-plugin	eq	code-coverage-api-1.3.1
code-coverage-api-plugin	eq	code-coverage-api-1.1.5
code-coverage-api-plugin	eq	code-coverage-api-1.0.0
code-coverage-api-plugin	eq	code-coverage-api-1.1.1
code-coverage-api-plugin	eq	code-coverage-api-1.0.12
code-coverage-api-plugin	eq	code-coverage-api-1.0.13