Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows reading arbitrary files using the file browser for workspaces and archived artifacts by following symlinks.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade jenkins | Aug 22, 2024 | Jan 13, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 13, 2021 |
| Jenkins 2021 01 13 | — | Upgrade Jenkins LTS to version 2.263.2Upgrade Jenkins LTS to the latest versionUpgrade Jenkins to version 2.275Upgrade Jenkins to the latest version | Dec 2, 2021 | Jan 13, 2021 |
| Redhat Openshift | — | Upgrade cri-toolsUpgrade openvswitch2.15Upgrade python-oslo-concurrencyUpgrade cri-oUpgrade openshift-kuryrUpgrade kata-containersUpgrade python-hardwareUpgrade python-ironic-libUpgrade python-stevedoreUpgrade python-pyrsistentUpgrade butaneUpgrade openstack-ironic-inspectorUpgrade ironic-images-ipa-ppc64leUpgrade rteval-loadsUpgrade python-oslo-policyUpgrade python-ironic-prometheus-exporterUpgrade python-oslo-serviceUpgrade openshift-ansibleUpgrade ironic-imagesUpgrade ostreeUpgrade python-oslo-serializationUpgrade python-eventletUpgrade openstack-ironicUpgrade python-oslo-dbUpgrade python-oslo-i18nUpgrade openstack-ironic-python-agentUpgrade python-oslo-upgradecheckUpgrade python-openshiftUpgrade python-openstacksdkUpgrade python-oslo-logUpgrade ironic-images-ipa-x86_64Upgrade machine-config-daemonUpgrade openshift-clientsUpgrade python-sushy-oem-idracUpgrade ignitionUpgrade atomic-openshift-service-idlerUpgrade podmanUpgrade haproxyUpgrade openshiftUpgrade redhat-release-coreosUpgrade python-oslo-contextUpgrade runcUpgrade ovn2.13Upgrade toolboxUpgrade python-oslo-configUpgrade python-jsonschemaUpgrade conmonUpgrade jenkinsUpgrade coreos-installerUpgrade python-sushyUpgrade console-login-helper-messagesUpgrade python-oslo-utilsUpgrade python-kubernetesUpgrade python-debtcollectorUpgrade rust-afterburnUpgrade python-toozUpgrade jenkins-2-pluginsUpgrade python-keystoneauth1 | Feb 19, 2021 | Jan 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub