CVE-2021-21604: Deserialization of Untrusted Data

January 13, 2021 (updated October 25, 2023)

Jenkins allows attackers with permission to create or configure various objects to inject crafted content into Old Data Monitor that results in the instantiation of potentially unsafe objects once discarded by an administrator.

References

nvd.nist.gov/vuln/detail/CVE-2021-21604
www.jenkins.io/security/advisory/2021-01-13/

Code Behaviors & Features

Detect and mitigate CVE-2021-21604 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →