CVE-2021-21698 Path traversal vulnerability in Jenkins Subversion Plugin allows reading arbitrary files
An attacker can read arbitrary files on the Jenkins controller by manipulating the subversion key file path from an agent.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-21698?
CVE-2021-21698 is a high-severity path traversal vulnerability in Jenkins Subversion Plugin, published on 4 Nov 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Jenkins Subversion Plugin 2.15.0 and earlier does not restrict the name of a file when looking up a subversion key file on the controller from an agent.
Weakness: CWE-22
Which versions are affected by CVE-2021-21698?
2 open source packages ship an affected version, including org.jenkins-ci.plugins:subversion. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
org.jenkins-ci.plugins:subversion Maven | All versions | 2.15.1 |
org.jenkins-ci.plugins:subversion Maven | All versions | 2.15.1 |
Products include Jenkins Subversion.
How do I fix CVE-2021-21698?
Upgrade org.jenkins-ci.plugins:subversion to 2.15.1 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2021-21698 being exploited?
There is no known exploitation of CVE-2021-21698 in the wild and no public exploit code.
Other vulnerabilities in Jenkins Subversion Plugin
Sources
Also known as GHSA-q58j-fhj7-j6fg.