Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows reading arbitrary files using the file browser for workspaces and archived artifacts by following symlinks.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade jenkins | Aug 22, 2024 | Jan 13, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 13, 2021 |
| Jenkins 2021 01 13 | — | Upgrade Jenkins to version 2.275Upgrade Jenkins LTS to the latest versionUpgrade Jenkins LTS to version 2.263.2Upgrade Jenkins to the latest version | Dec 2, 2021 | Jan 13, 2021 |
| Redhat Openshift | — | Upgrade python-openstacksdkUpgrade toolboxUpgrade ovn2.13Upgrade podmanUpgrade python-oslo-contextUpgrade python-oslo-utilsUpgrade atomic-openshift-service-idlerUpgrade python-keystoneauth1Upgrade python-kubernetesUpgrade console-login-helper-messagesUpgrade openshift-clientsUpgrade runcUpgrade python-oslo-logUpgrade rust-afterburnUpgrade machine-config-daemonUpgrade haproxyUpgrade conmonUpgrade jenkinsUpgrade coreos-installerUpgrade ironic-images-ipa-x86_64Upgrade openshiftUpgrade python-sushy-oem-idracUpgrade python-jsonschemaUpgrade python-oslo-configUpgrade ignitionUpgrade redhat-release-coreosUpgrade jenkins-2-pluginsUpgrade python-toozUpgrade python-debtcollectorUpgrade python-sushyUpgrade python-openshiftUpgrade openstack-ironic-inspectorUpgrade cri-toolsUpgrade cri-oUpgrade openvswitch2.15Upgrade python-oslo-policyUpgrade python-oslo-serviceUpgrade openstack-ironic-python-agentUpgrade kata-containersUpgrade openshift-ansibleUpgrade python-eventletUpgrade rteval-loadsUpgrade python-oslo-upgradecheckUpgrade python-oslo-serializationUpgrade butaneUpgrade ironic-imagesUpgrade python-ironic-libUpgrade python-ironic-prometheus-exporterUpgrade openshift-kuryrUpgrade python-hardwareUpgrade python-stevedoreUpgrade openstack-ironicUpgrade python-pyrsistentUpgrade python-oslo-dbUpgrade python-oslo-i18nUpgrade python-oslo-concurrencyUpgrade ironic-images-ipa-ppc64leUpgrade ostree | Feb 19, 2021 | Jan 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub