CVE-2021-21695
FilePath#listFiles lists files outside directories that agents are allowed to access when following symbolic links in Jenkins LTS 2.303.2 and earlier.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
FilePath#listFiles lists files outside directories that agents are allowed to access when following symbolic links in Jenkins LTS 2.303.2 and earlier.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
jenkins
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.319.0"}]}]
Références
- advisory openwall.com
- advisory jenkins.io
- web nvd.nist.gov