What’s Vulnerable › Vulnerabilities

CVE-2021-21604

• Severity: high (CVSS 8.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-01-13 · updated 2026-06-17
• Weakness: CWE-502

Description

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows attackers with permission to create or configure various objects to inject crafted content into Old Data Monitor that results in the instantiation of potentially unsafe objects once discarded by an administrator.

Affected products

• Jenkins: through 2.263.1; through 2.274

References

• https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-1923
• https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-1923

Get alerted when CVE-2021-21604 or the next vulnerability affects your stack