Search for vulnerabilities
Vulnerability details: VCID-58x5-4rkw-huec
Vulnerability ID VCID-58x5-4rkw-huec
Aliases CVE-2021-21682
GHSA-6q4g-84f3-mw74
Summary directory traversal
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-42 Path Equivalence: 'filename.' (Trailing Dot)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00881 https://api.first.org/data/v1/epss?cve=CVE-2021-21682
epss 0.00881 https://api.first.org/data/v1/epss?cve=CVE-2021-21682
epss 0.01283 https://api.first.org/data/v1/epss?cve=CVE-2021-21682
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-6q4g-84f3-mw74
cvssv3.1 6.3 https://github.com/jenkinsci/jenkins/commit/c2c2b59071265aea07f88d5e95297c0a433921c3
generic_textual MODERATE https://github.com/jenkinsci/jenkins/commit/c2c2b59071265aea07f88d5e95297c0a433921c3
cvssv3.1 6.3 https://nvd.nist.gov/vuln/detail/CVE-2021-21682
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2021-21682
archlinux Medium https://security.archlinux.org/AVG-2449
cvssv3.1 6.3 https://www.jenkins.io/security/advisory/2021-10-06/#SECURITY-2424
generic_textual MODERATE https://www.jenkins.io/security/advisory/2021-10-06/#SECURITY-2424
cvssv3.1 6.3 http://www.openwall.com/lists/oss-security/2021/10/06/1
generic_textual MODERATE http://www.openwall.com/lists/oss-security/2021/10/06/1
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2021-21682
https://github.com/jenkinsci/jenkins/commit/c2c2b59071265aea07f88d5e95297c0a433921c3
https://nvd.nist.gov/vuln/detail/CVE-2021-21682
https://www.jenkins.io/security/advisory/2021-10-06/#SECURITY-2424
http://www.openwall.com/lists/oss-security/2021/10/06/1
AVG-2449 https://security.archlinux.org/AVG-2449
GHSA-6q4g-84f3-mw74 https://github.com/advisories/GHSA-6q4g-84f3-mw74
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Found at https://github.com/jenkinsci/jenkins/commit/c2c2b59071265aea07f88d5e95297c0a433921c3
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Found at https://nvd.nist.gov/vuln/detail/CVE-2021-21682
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Found at https://www.jenkins.io/security/advisory/2021-10-06/#SECURITY-2424
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Found at http://www.openwall.com/lists/oss-security/2021/10/06/1
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.74349
EPSS Score 0.00881
Published At June 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-01T11:54:19.190090+00:00 Arch Linux Importer Import https://security.archlinux.org/AVG-2449 36.1.3