CVE-2021-21602: Jenkins

Medium severity, CVSS 6.5. EPSS: 2.3% chance of exploitation in the next 30 days.

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows reading arbitrary files using the file browser for workspaces and archived artifacts by following symlinks.

Affected products

• Jenkins Jenkins: up to and including 2.263.1; up to and including 2.274

Published 2021-01-13. Last modified 2026-06-17.