Search for vulnerabilities
Vulnerability details: VCID-kyc1-uk31-zuag
Vulnerability ID VCID-kyc1-uk31-zuag
Aliases CVE-2021-21697
GHSA-cv2w-q8c3-xjv7
Summary multiple issues
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-184 Incomplete List of Disallowed Inputs
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3 8.8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-21697.json
epss 0.00509 https://api.first.org/data/v1/epss?cve=CVE-2021-21697
epss 0.00509 https://api.first.org/data/v1/epss?cve=CVE-2021-21697
epss 0.00509 https://api.first.org/data/v1/epss?cve=CVE-2021-21697
cvssv3.1_qr CRITICAL https://github.com/advisories/GHSA-cv2w-q8c3-xjv7
cvssv3.1 9.1 https://github.com/jenkinsci/jenkins
generic_textual CRITICAL https://github.com/jenkinsci/jenkins
cvssv3.1 9.1 https://github.com/jenkinsci/jenkins/commit/cf388d2a04e6016d23eb93fa3cc804f2554b98f0
generic_textual CRITICAL https://github.com/jenkinsci/jenkins/commit/cf388d2a04e6016d23eb93fa3cc804f2554b98f0
cvssv3.1 9.1 https://github.com/jenkinsci/jenkins/commit/eae33841b587da787f37d5b6c8451d483edc04d9
generic_textual CRITICAL https://github.com/jenkinsci/jenkins/commit/eae33841b587da787f37d5b6c8451d483edc04d9
cvssv3.1 9.1 https://nvd.nist.gov/vuln/detail/CVE-2021-21697
generic_textual CRITICAL https://nvd.nist.gov/vuln/detail/CVE-2021-21697
archlinux Critical https://security.archlinux.org/AVG-2526
cvssv3.1 9.1 https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2428
generic_textual CRITICAL https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2428
cvssv3.1 9.1 http://www.openwall.com/lists/oss-security/2021/11/04/3
generic_textual CRITICAL http://www.openwall.com/lists/oss-security/2021/11/04/3
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-21697.json
https://api.first.org/data/v1/epss?cve=CVE-2021-21697
https://github.com/jenkinsci/jenkins
https://github.com/jenkinsci/jenkins/commit/cf388d2a04e6016d23eb93fa3cc804f2554b98f0
https://github.com/jenkinsci/jenkins/commit/eae33841b587da787f37d5b6c8451d483edc04d9
https://nvd.nist.gov/vuln/detail/CVE-2021-21697
https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2428
http://www.openwall.com/lists/oss-security/2021/11/04/3
2020345 https://bugzilla.redhat.com/show_bug.cgi?id=2020345
ASA-202111-1 https://security.archlinux.org/ASA-202111-1
AVG-2526 https://security.archlinux.org/AVG-2526
GHSA-cv2w-q8c3-xjv7 https://github.com/advisories/GHSA-cv2w-q8c3-xjv7
RHSA-2021:4799 https://access.redhat.com/errata/RHSA-2021:4799
RHSA-2021:4801 https://access.redhat.com/errata/RHSA-2021:4801
RHSA-2021:4827 https://access.redhat.com/errata/RHSA-2021:4827
RHSA-2021:4829 https://access.redhat.com/errata/RHSA-2021:4829
RHSA-2021:4833 https://access.redhat.com/errata/RHSA-2021:4833
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-21697.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Found at https://github.com/jenkinsci/jenkins
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Found at https://github.com/jenkinsci/jenkins/commit/cf388d2a04e6016d23eb93fa3cc804f2554b98f0
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Found at https://github.com/jenkinsci/jenkins/commit/eae33841b587da787f37d5b6c8451d483edc04d9
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2021-21697
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Found at https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2428
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Found at http://www.openwall.com/lists/oss-security/2021/11/04/3
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.65334
EPSS Score 0.00509
Published At June 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-01T11:52:45.274235+00:00 Arch Linux Importer Import https://security.archlinux.org/AVG-2526 36.1.3