Lucene search

K
osvGoogleOSV:CVE-2021-21607
HistoryJan 13, 2021 - 4:15 p.m.

CVE-2021-21607

2021-01-1316:15:13
Google
osv.dev
3

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.9%

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attackers to request crafted URLs that use all available memory in Jenkins, potentially leading to out of memory errors.

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.9%