CVE-2021-21682

Fixed upstream EPSS <1%

Jenkins 2.314 and earlier, LTS 2.303.1 and earlier accepts names of jobs and other entities with a trailing dot character, potentially replacing the configuration and data of other entities on Windows.

Published 2021-10-06 · CVE record · OSV

Products: Jenkins project Jenkins

Fixed upstream