Security Advisory

CVE-2021-21677

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-08-31 13:50:13

Last updated 2024-08-03 18:23:27

Assigner jenkins

CVSS score not scored

State PUBLISHED

Description

Jenkins Code Coverage API Plugin 1.4.0 and earlier does not apply Jenkins JEP-200 deserialization protection to Java objects it deserializes from disk, resulting in a remote code execution vulnerability.

← Browse all CVEs View on cve.org ↗