CVE-2021-21695
FilePath#listFiles lists files outside directories that agents are allowed to access when following symbolic links in Jenkins LTS 2.303.2 and earlier.
Original description
The description as published by the source.
FilePath#listFiles lists files outside directories that agents are allowed to access when following symbolic links in Jenkins LTS 2.303.2 and earlier.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
jenkins
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.319.0"}]}]
References
- advisory openwall.com
- advisory jenkins.io
- web nvd.nist.gov