CVE-2021-21647

CVE-2021-21647: vulnerability in Jenkins CloudBees CD Plugin

Published · Updated

Follow this CVE+ Monitor Jenkins CloudBees CD Plugin+ Monitor org.jenkins-ci.plugins:electricflow

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.5%
Jenkins CloudBees CD Plugin 1.1.21 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Item/Read permission to schedule builds of projects without having Item/Build permission.
Affected products
Jenkins project · Jenkins CloudBees CD Plugin