Maven/org.jenkins-ci.main:jenkins-core CVE-2021-21639: medium 4.3

Lack of type validation in agent related REST API in Jenkins

Action: Upgrade org.jenkins-ci.main:jenkins-core to 2.277.2 (2.277.x) or 2.287 (2.287.x) or later.

Affected

Fixed versions

Sources

• osv: GHSA-pvwx-3jx5-24r2
• https://nvd.nist.gov/vuln/detail/CVE-2021-21639
• https://github.com/jenkinsci/jenkins/commit/84210baed0c866bdee3e59271f98a767a14a5509
• https://github.com/jenkinsci/jenkins
• https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-1721
• http://www.openwall.com/lists/oss-security/2021/04/07/2

CVE-2021-21639 · published 2022-05-24T17:46:47Z · modified 2024-02-16T08:06:14.423570Z · JSON