5 matches found
EUVD-2022-3481
Malicious code in bioql PyPI...
CVE-2020-2158
Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...
Remote code execution
Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...
CVE-2020-2158
The CVE-2020-2158 entry affects Jenkins Literate Plugin versions 1.0 and earlier. The root cause is that the YAML parser is not configured to prevent instantiation of arbitrary types, enabling remote code execution. The impact is remote code execution with the plugin, and multiple sources identif...
PT-2020-15376 · Jenkins · Jenkins Literate Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Literate Plugin versions 1.0 and earlier Description: The issue results from the Jenkins Literate Plugin not configuring its YAML parser to prevent the instantiation of arbitrary types, leading to a remote code execution vulnerability...