Remote code execution

Jenkins SCM Filter Jervis Plugin 0.2.1 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...

CVE-2020-2189

CVE-2020-2189 concerns Jenkins SCM Filter Jervis Plugin. The vulnerability stems from the YAML parser not being configured to prevent arbitrary type instantiation in version 0.2.1 and earlier, allowing remote code execution when a user configures a job with the filter or controls a previously con...

CVE-2020-2189

Jenkins SCM Filter Jervis Plugin 0.2.1 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...

PT-2020-15403 · Jenkins · Jenkins Scm Filter Jervis Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins SCM Filter Jervis Plugin versions 0.2.1 and earlier Description: The issue results from the YAML parser not being configured to prevent the instantiation of arbitrary types, leading to a remote code execution vulnerability. This...