Jenkins Security Advisory 2021-06-16

Affects plugin: Scriptler

CSIRTS triage

What: The Scriptler plugin in Jenkins has vulnerabilities that could potentially be exploited.
Who is affected: Deployments of the Scriptler plugin are affected.
Urgency: Remediation is necessary as vulnerabilities exist, although exploitation status is currently unknown.
Action: Update to the latest version of the Scriptler plugin.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Jenkins

Get an email when a new Jenkins advisory drops — max one per day, one-click unsubscribe.

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Exploitation likely imminentCVE-2021-21667EPSS puts this in the most-targeted tier (75.7% 30-day exploitation probability). Prioritize alongside KEV items. Riskier than 99.5% of all EPSS-scored CVEs.
Exploitation likely imminentCVE-2021-21668EPSS puts this in the most-targeted tier (76.0% 30-day exploitation probability). Prioritize alongside KEV items. Riskier than 99.5% of all EPSS-scored CVEs.

CVE	CSIRTS overview	External
CVE-2021-21667	coverage & exploitation status	NVD · CVE.org
CVE-2021-21668	coverage & exploitation status	NVD · CVE.org