CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Jenkins.
CVE
CVE-2021-21694
Severity
CRITICAL
CVSS
9.8
EPSS
1.50%
Jenkins
Original NVD Description
FilePath#toURI, FilePath#hasSymlink, FilePath#absolutize, FilePath#isDescendant, and FilePath#get*DiskSpace do not check any permissions in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.
Related CVEs
Other vulnerabilities affecting the same vendor(s)