org.jenkins-ci.main:jenkins-test-harness (1.505), org.jenkins-ci.main:jenkins-war (1.505) +6 more potentially affected by CVE-2021-21690 via org.jenkins-ci.main:jenkins-core (1.505)

org.jenkins-ci.main:jenkins-core MAVEN version 1.505 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.505 - org.jenkins-ci.main:jenkins-war 1.505 -...

com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin (1.0.0), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (0.19) +14 more potentially affected by CVE-2021-21690 via org.jenkins-ci.main:jenkins-core (1.404)

org.jenkins-ci.main:jenkins-core MAVEN version 1.404 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin 1.0.0 -...

org.jenkins-ci.main:jenkins-test-harness (1.447.2), org.jenkins-ci.main:jenkins-war (1.447.2) +2 more potentially affected by CVE-2021-21690 via org.jenkins-ci.main:jenkins-core (1.447.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.447.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.447.2 - org.jenkins-ci.main:jenkins-war 1.447.2 -...

org.jenkins-ci.main:jenkins-test-harness (1.551), org.jenkins-ci.main:jenkins-war (1.551) +4 more potentially affected by CVE-2021-21690 via org.jenkins-ci.main:jenkins-core (1.551)

org.jenkins-ci.main:jenkins-core MAVEN version 1.551 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.551 - org.jenkins-ci.main:jenkins-war 1.551 -...

com.amazonaws:codedeploy (>=1.17, <=1.23), hudson.plugins.octopusdeploy:octopusdeploy (>=1.3.0, <=1.4.0) +6 more potentially affected by CVE-2021-21690 via org.jenkins-ci.main:jenkins-core (1.612)

org.jenkins-ci.main:jenkins-core MAVEN version 1.612 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.amazonaws:codedeploy =1.17, =1.3.0, =2.7.0, =1.0, =1.4 -...

jenkins.plugins:simpleclearcase (>=1.2, <=1.2.2), org.jenkins-ci.main:jenkins-test-harness (1.452) +5 more potentially affected by CVE-2021-21690 via org.jenkins-ci.main:jenkins-core (1.452)

org.jenkins-ci.main:jenkins-core MAVEN version 1.452 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - jenkins.plugins:simpleclearcase =1.2, =1.2.2 - org.jenkins-ci.main:jenkins-test-harness 1.452 -...

org.jenkins-ci.main:jenkins-test-harness (1.554.3.jenkins-18065-jenkins-23945), org.jenkins-ci.main:jenkins-war (1.554.3.jenkins-18065-jenkins-23945) potentially affected by CVE-2021-21690 via org.jenkins-ci.main:jenkins-core (1.554.3.jenkins-18065-jenkins-23945)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.3.jenkins-18065-jenkins-23945 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness...

com.github.bogdanlivadariu:bootstraped-multi-test-results-report (>=1.0.0, <=1.3.4), org.jenkins-ci.main:jenkins-test-harness (1.616) +2 more potentially affected by CVE-2021-21690 via org.jenkins-ci.main:jenkins-core (1.616)

org.jenkins-ci.main:jenkins-core MAVEN version 1.616 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.bogdanlivadariu:bootstraped-multi-test-results-report =1.0.0, =1.3.4 -...

com.boxuk.jenkins:jslint (0.7.4), net.praqma:logging (>=0.1.1, <=0.1.2) +6 more potentially affected by CVE-2021-21690 via org.jenkins-ci.main:jenkins-core (1.474)

org.jenkins-ci.main:jenkins-core MAVEN version 1.474 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.boxuk.jenkins:jslint 0.7.4 - net.praqma:logging =0.1.1, =0.7.5, =0.8.0 -...

Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins

The agent-to-controller security subsystem limits which files on the Jenkins controller can be accessed by agent processes. Multiple vulnerabilities in the file path filtering implementation of Jenkins 2.318 and earlier, LTS 2.303.2 and earlier allow agent processes to read and write arbitrary...

biz.neustar.jenkins.plugins:packer (>=1.3, <=1.4), com.amazonaws:codedeploy (1.12) +30 more potentially affected by CVE-2021-21690 via org.jenkins-ci.main:jenkins-core (1.554.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - biz.neustar.jenkins.plugins:packer =1.3, =1.12.0-alpha-1, =1.46, =4.7, =1.0.0, =2.9.9, =1.10,...

org.jenkins-ci.main:jenkins-test-harness (1.530), org.jenkins-ci.main:jenkins-war (1.530) +3 more potentially affected by CVE-2021-21690 via org.jenkins-ci.main:jenkins-core (1.530)

org.jenkins-ci.main:jenkins-core MAVEN version 1.530 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.530 - org.jenkins-ci.main:jenkins-war 1.530 -...

com.groupon.jenkins-ci.plugins:dotci (>=2.30.2, <=2.36.2), org.jenkins-ci.main:jenkins-war (1.655) +1 more potentially affected by CVE-2021-21690 via org.jenkins-ci.main:jenkins-core (1.655)

org.jenkins-ci.main:jenkins-core MAVEN version 1.655 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.30.2, =2.36.2 - org.jenkins-ci.main:jenkins-war 1.655 -...

org.jenkins-ci.main:jenkins-war (1.516.jenkins-14362-jzlib), org.jenkins-ci.main:maven-plugin (1.516.jenkins-14362-jzlib) potentially affected by CVE-2021-21690 via org.jenkins-ci.main:jenkins-core (1.516.jenkins-14362-jzlib)

org.jenkins-ci.main:jenkins-core MAVEN version 1.516.jenkins-14362-jzlib is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.516.jenkins-14362-jzlib -...

org.jenkins-ci.main:jenkins-test-harness (1.544), org.jenkins-ci.main:jenkins-war (1.544) +2 more potentially affected by CVE-2021-21690 via org.jenkins-ci.main:jenkins-core (1.544)

org.jenkins-ci.main:jenkins-core MAVEN version 1.544 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.544 - org.jenkins-ci.main:jenkins-war 1.544 -...

com.coravy.hudson.plugins.github:github (>=1.9, <=1.9.1), org.jenkins-ci.main:jenkins-test-harness (1.448) +10 more potentially affected by CVE-2021-21690 via org.jenkins-ci.main:jenkins-core (1.448)

org.jenkins-ci.main:jenkins-core MAVEN version 1.448 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.coravy.hudson.plugins.github:github =1.9, =1.3.0, =1.0.5, =2.6, =2.17 -...

com.nirima.jenkins.repository:jenkins-maven-plugin (1.0), com.nirima.jenkins.repository:pom (1.0) +10 more potentially affected by CVE-2021-21690 via org.jenkins-ci.main:jenkins-core (1.499)

org.jenkins-ci.main:jenkins-core MAVEN version 1.499 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.nirima.jenkins.repository:jenkins-maven-plugin 1.0 - com.nirima.jenkins.repository:pom 1.0 ...

com.cloudbees.jenkins.plugins:additional-identities-plugin (1.1), com.suryagaddipati.jenkins:slave-utilization-plugin (>=1.1, <=1.8) +8 more potentially affected by CVE-2021-21690 via org.jenkins-ci.main:jenkins-core (1.488)

org.jenkins-ci.main:jenkins-core MAVEN version 1.488 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:additional-identities-plugin 1.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.524), org.jenkins-ci.main:jenkins-war (1.524) +5 more potentially affected by CVE-2021-21690 via org.jenkins-ci.main:jenkins-core (1.524)

org.jenkins-ci.main:jenkins-core MAVEN version 1.524 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.524 - org.jenkins-ci.main:jenkins-war 1.524 -...

org.jenkins-ci.main:jenkins-war (1.532.1.jenkins-19453) potentially affected by CVE-2021-21690 via org.jenkins-ci.main:jenkins-core (1.532.1.jenkins-19453)

org.jenkins-ci.main:jenkins-core MAVEN version 1.532.1.jenkins-19453 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.532.1.jenkins-19453 Source cves: CVE-2021-216...