CVE-2021-21640: Jenkins

Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days.

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not properly check that a newly created view has an allowed name, allowing attackers with View/Create permission to create views with invalid or already-used names.

Affected products

• Jenkins Jenkins: up to and including 2.277.1; up to and including 2.286

Published 2021-04-07. Last modified 2026-06-17.