Описание
Jenkins 2.333 and earlier, LTS 2.319.2 and earlier defines custom XStream converters that have not been updated to apply the protections for the vulnerability CVE-2021-43859 and allow unconstrained resource usage.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| jenkins | removed | package |
EPSS
Процентиль: 90%
0.03901
Низкий
Связанные уязвимости
CVSS3: 7.5
redhat
больше 4 лет назад
Jenkins 2.333 and earlier, LTS 2.319.2 and earlier defines custom XStream converters that have not been updated to apply the protections for the vulnerability CVE-2021-43859 and allow unconstrained resource usage.
CVSS3: 7.5
nvd
больше 4 лет назад
Jenkins 2.333 and earlier, LTS 2.319.2 and earlier defines custom XStream converters that have not been updated to apply the protections for the vulnerability CVE-2021-43859 and allow unconstrained resource usage.
CVSS3: 6.5
github
больше 4 лет назад
DoS vulnerability in bundled XStream library in Jenkins Core
EPSS
Процентиль: 90%
0.03901
Низкий