EUVD-2022-2886

Malicious code in bioql PyPI...

GHSA-723P-9RCJ-XV8J RCE vulnerability in RadarGun Plugin

RadarGun Plugin 1.7 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types. This results in a remote code execution vulnerability exploitable by users able to configure RadarGun Plugin’s build step. RadarGun Plugin 1.8 configures its YAML parser to only...

RCE vulnerability in RadarGun Plugin

RadarGun Plugin 1.7 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types. This results in a remote code execution vulnerability exploitable by users able to configure RadarGun Plugin’s build step. RadarGun Plugin 1.8 configures its YAML parser to only...

CVE-2020-2123

Jenkins RadarGun Plugin 1.7 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...

CVE-2020-2123

Jenkins RadarGun Plugin 1.7 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...

Remote code execution

Jenkins RadarGun Plugin 1.7 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...

CVE-2020-2123

Jenkins RadarGun Plugin 1.7 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...

CVE-2020-2123

The CVE-2020-2123 entry maps to a RCE in the Jenkins RadarGun Plugin (versions 1.7 and earlier) caused by misconfigured YAML parsing that allows arbitrary types to be instantiated. Public references in GHSA/OSV/NVD entries confirm the root cause is unsafe YAML deserialization within RadarGun plug...

PT-2020-15330 · Jenkins · Jenkins Radargun Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins RadarGun Plugin versions 1.7 and earlier Description: The issue is related to the configuration of the YAML parser in the Jenkins RadarGun Plugin, which does not prevent the instantiation of arbitrary types. This results in a remote...