Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows attackers with permission to create or configure various objects to inject crafted content into Old Data Monitor that results in the instantiation of potentially unsafe objects once discarded by an administrator.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade jenkins | Aug 22, 2024 | Jan 13, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 13, 2021 |
| Jenkins 2021 01 13 | — | Upgrade Jenkins to version 2.275Upgrade Jenkins to the latest versionUpgrade Jenkins LTS to version 2.263.2Upgrade Jenkins LTS to the latest version | Dec 2, 2021 | Jan 13, 2021 |
| Redhat Openshift | — | Upgrade python-kubernetesUpgrade ovn2.13Upgrade openstack-ironic-inspectorUpgrade python-oslo-concurrencyUpgrade openvswitch2.15Upgrade python-oslo-serializationUpgrade machine-config-daemonUpgrade runcUpgrade python-ironic-prometheus-exporterUpgrade python-oslo-logUpgrade kata-containersUpgrade atomic-openshift-service-idlerUpgrade python-eventletUpgrade openstack-ironicUpgrade python-hardwareUpgrade python-oslo-i18nUpgrade ironic-imagesUpgrade openstack-ironic-python-agentUpgrade python-oslo-upgradecheckUpgrade python-oslo-configUpgrade openshift-kuryrUpgrade ostreeUpgrade coreos-installerUpgrade python-ironic-libUpgrade python-oslo-serviceUpgrade python-openshiftUpgrade ironic-images-ipa-ppc64leUpgrade python-pyrsistentUpgrade openshift-clientsUpgrade python-oslo-utilsUpgrade python-keystoneauth1Upgrade jenkins-2-pluginsUpgrade python-openstacksdkUpgrade python-oslo-policyUpgrade python-oslo-dbUpgrade rteval-loadsUpgrade python-jsonschemaUpgrade ignitionUpgrade console-login-helper-messagesUpgrade jenkinsUpgrade python-toozUpgrade python-debtcollectorUpgrade cri-toolsUpgrade python-sushyUpgrade ironic-images-ipa-x86_64Upgrade podmanUpgrade openshift-ansibleUpgrade python-stevedoreUpgrade cri-oUpgrade redhat-release-coreosUpgrade openshiftUpgrade conmonUpgrade toolboxUpgrade python-sushy-oem-idracUpgrade butaneUpgrade rust-afterburnUpgrade haproxyUpgrade python-oslo-context | Feb 19, 2021 | Jan 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub