Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows attackers with permission to create or configure various objects to inject crafted content into Old Data Monitor that results in the instantiation of potentially unsafe objects once discarded by an administrator.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade jenkins | Aug 22, 2024 | Jan 13, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 13, 2021 |
| Jenkins 2021 01 13 | — | Upgrade Jenkins LTS to the latest versionUpgrade Jenkins to the latest versionUpgrade Jenkins to version 2.275Upgrade Jenkins LTS to version 2.263.2 | Dec 2, 2021 | Jan 13, 2021 |
| Redhat Openshift | — | Upgrade cri-toolsUpgrade ironic-images-ipa-x86_64Upgrade redhat-release-coreosUpgrade rust-afterburnUpgrade python-openstacksdkUpgrade console-login-helper-messagesUpgrade python-stevedoreUpgrade ironic-images-ipa-ppc64leUpgrade python-oslo-utilsUpgrade python-sushy-oem-idracUpgrade python-oslo-contextUpgrade python-sushyUpgrade jenkins-2-pluginsUpgrade openshiftUpgrade openshift-clientsUpgrade conmonUpgrade ignitionUpgrade podmanUpgrade openshift-ansibleUpgrade python-debtcollectorUpgrade python-keystoneauth1Upgrade jenkinsUpgrade python-pyrsistentUpgrade rteval-loadsUpgrade python-toozUpgrade toolboxUpgrade python-jsonschemaUpgrade haproxyUpgrade python-oslo-policyUpgrade cri-oUpgrade butaneUpgrade python-oslo-dbUpgrade python-kubernetesUpgrade python-oslo-logUpgrade openstack-ironicUpgrade openstack-ironic-python-agentUpgrade ovn2.13Upgrade kata-containersUpgrade atomic-openshift-service-idlerUpgrade ironic-imagesUpgrade python-oslo-configUpgrade machine-config-daemonUpgrade coreos-installerUpgrade openstack-ironic-inspectorUpgrade openvswitch2.15Upgrade python-oslo-upgradecheckUpgrade python-ironic-libUpgrade ostreeUpgrade python-oslo-concurrencyUpgrade openshift-kuryrUpgrade python-oslo-serviceUpgrade python-openshiftUpgrade python-oslo-i18nUpgrade python-hardwareUpgrade python-eventletUpgrade python-oslo-serializationUpgrade runcUpgrade python-ironic-prometheus-exporter | Feb 19, 2021 | Jan 13, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub