3 matches found
CVE-2020-2158
Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...
8.8CVSS7.7AI score0.02867EPSS
SaveExploits0
CVE-2020-2158
Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...
8.8CVSS9AI score0.02867EPSS
SaveExploits0References2
CVE-2020-2158
The CVE-2020-2158 entry affects Jenkins Literate Plugin versions 1.0 and earlier. The root cause is that the YAML parser is not configured to prevent instantiation of arbitrary types, enabling remote code execution. The impact is remote code execution with the plugin, and multiple sources identif...
8.8CVSS8.9AI score0.02867EPSS
SaveExploits0References2Affected Software1
20