Not rated
CVE-2021-21646 Jenkins Templating Engine Plugin 2.1 and earlier does not protect its pipeline configurations using Script Security…
Description
Jenkins Templating Engine Plugin 2.1 and earlier does not protect its pipeline configurations using Script Security Plugin, allowing attackers with Job/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Templating Engine Plugin 2.1 | earliest → 2.1 | No fix stated |
References
- www.jenkins.io www.jenkins.io
- [oss-security] 20210421 Multiple vulnerabilities in Jenkins plugins www.openwall.com
Timeline
- Published
- Last modified