Lucene search
PRIOn knowledge basePRION:CVE-2021-21694HistoryNov 04, 2021 - 5:15 p.m.
Server side request forgery (ssrf)
2021-11-0417:15:00
PRIOn knowledge base
www.prio-n.com
7
FilePath#toURI, FilePath#hasSymlink, FilePath#absolutize, FilePath#isDescendant, and FilePath#get*DiskSpace do not check any permissions in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.
Related
alpinelinux
alpinelinux
CVE-2021-21694
2021-11-04 17:15:00
osv
osv
CVE-2021-21694
2021-11-04 17:15:08
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
2022-05-24 19:19:44
BIT-jenkins-2021-21694
2024-03-06 10:59:35
nvd
nvd
CVE-2021-21694
2021-11-04 17:15:08
veracode
veracode
Privilege Escalation
2021-12-08 00:40:57
redhatcve
redhatcve
CVE-2021-21694
2021-11-04 16:52:15
cve
cve
CVE-2021-21694
2021-11-04 17:15:08
github
github
cnvd
cnvd
Jenkins has an unspecified vulnerability (CNVD-2021-88722)
2021-11-08 00:00:00
cvelist
cvelist
CVE-2021-21694
2021-11-04 16:30:38
openvas
openvas
Jenkins < 2.303.3, < 2.319 Multiple Vulnerabilities - Linux
2021-11-05 00:00:00
Jenkins < 2.303.3, < 2.319 Multiple Vulnerabilities - Windows
2021-11-05 00:00:00
archlinux
archlinux
[ASA-202111-1] jenkins: multiple issues
2021-11-05 00:00:00
nessus
nessus
Jenkins LTS < 2.303.3 / Jenkins weekly < 2.319 Multiple Vulnerabilities
2021-11-04 00:00:00
RHEL 8 : OpenShift Container Platform 4.9.9 (RHSA-2021:4833)
2021-11-30 00:00:00
RHEL 7 : OpenShift Container Platform 3.11.569 (RHSA-2021:4827)
2021-12-04 00:00:00
redhat
redhat
freebsd
freebsd
jenkins -- multiple vulnerabilities
2021-11-04 00:00:00