← CVE Intelligence

CVE-2021-21602

Jenkins project / Jenkins PUBLISHED

Description (CNA)

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows reading arbitrary files using the file browser for workspaces and archived artifacts by following symlinks.

Affected (CNA)

Vendor / productVersions
Jenkins project / Jenkinsaffected unspecified through 2.274; affected unspecified through LTS 2.263.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.