CVE-2020-2121

The CVE-2020-2121 issue affects Jenkins Google Kubernetes Engine Plugin versions 0.8.0 and earlier. The root cause is the plugin’s YAML parser configuration that permits instantiation of arbitrary types, enabling remote code execution. The vulnerability is exploitable by users who can supply YAML...