CVE-2020-2158

2020-03-0916:15:15

Google

osv.dev

7.8 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

83.2%

JSON

Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.

CPENameOperatorVersion
literate-plugineqliterate-0.2-beta-2
literate-plugineqliterate-0.2-beta-5
literate-plugineqliterate-0.1-beta-1
literate-plugineqliterate-0.2-beta-3
literate-plugineqliterate-0.2-beta-1
literate-plugineqliterate-0.1-beta-2
literate-plugineqliterate-1.0
literate-plugineqliterate-0.2-beta-4

Name	Operator	Version
literate-plugin	eq	literate-0.2-beta-2
literate-plugin	eq	literate-0.2-beta-5
literate-plugin	eq	literate-0.1-beta-1
literate-plugin	eq	literate-0.2-beta-3
literate-plugin	eq	literate-0.2-beta-1
literate-plugin	eq	literate-0.1-beta-2
literate-plugin	eq	literate-1.0
literate-plugin	eq	literate-0.2-beta-4