CVE-2021-21677
Assigner: jenkins
Published: 2021-08-31T13:50:13
State: PUBLISHED
affected: product: Jenkins Code Coverage API Plugin
vendor: Jenkins project
versions: lessThanOrEqual: 1.4.0
status: affected
version: unspecified
versionType: custom
descriptions: value: Jenkins Code Coverage API Plugin 1.4.0 and earlier does not apply Jenkins JEP-200 deserialization protection to Java objects it deserializes from disk, resulting in a remote code execution vulnerability.