Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows reading arbitrary files using the file browser for workspaces and archived artifacts by following symlinks.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade jenkins | Aug 22, 2024 | Jan 13, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 13, 2021 |
| Jenkins 2021 01 13 | — | Upgrade Jenkins LTS to version 2.263.2Upgrade Jenkins to the latest versionUpgrade Jenkins LTS to the latest versionUpgrade Jenkins to version 2.275 | Dec 2, 2021 | Jan 13, 2021 |
| Redhat Openshift | — | Upgrade python-sushyUpgrade python-kubernetesUpgrade ignitionUpgrade openshiftUpgrade machine-config-daemonUpgrade python-openstacksdkUpgrade ovn2.13Upgrade python-oslo-utilsUpgrade jenkins-2-pluginsUpgrade python-toozUpgrade jenkinsUpgrade podmanUpgrade atomic-openshift-service-idlerUpgrade coreos-installerUpgrade toolboxUpgrade python-jsonschemaUpgrade python-oslo-configUpgrade rust-afterburnUpgrade runcUpgrade python-sushy-oem-idracUpgrade redhat-release-coreosUpgrade haproxyUpgrade python-debtcollectorUpgrade python-oslo-logUpgrade openshift-clientsUpgrade ironic-images-ipa-x86_64Upgrade console-login-helper-messagesUpgrade conmonUpgrade python-keystoneauth1Upgrade python-oslo-contextUpgrade python-ironic-prometheus-exporterUpgrade cri-oUpgrade openstack-ironic-inspectorUpgrade rteval-loadsUpgrade python-oslo-dbUpgrade python-pyrsistentUpgrade kata-containersUpgrade openvswitch2.15Upgrade python-oslo-concurrencyUpgrade python-oslo-upgradecheckUpgrade python-oslo-serviceUpgrade ironic-images-ipa-ppc64leUpgrade python-stevedoreUpgrade openshift-ansibleUpgrade python-ironic-libUpgrade openstack-ironicUpgrade ostreeUpgrade cri-toolsUpgrade ironic-imagesUpgrade python-oslo-i18nUpgrade python-oslo-policyUpgrade butaneUpgrade python-openshiftUpgrade openshift-kuryrUpgrade python-hardwareUpgrade python-eventletUpgrade openstack-ironic-python-agentUpgrade python-oslo-serialization | Feb 19, 2021 | Jan 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub