CVE-2020-2167

CVE-2020-2167 affects the Jenkins OpenShift Pipeline Plugin, with versions 1.0.56 and earlier vulnerable. The root cause is the YAML parser not restricting deserialization of arbitrary types, enabling remote code execution when a user provides YAML input to the plugin’s build step. Public records...

CVE-2025-64143

The Jenkins OpenShift Pipeline Plugin (versions 1.0.57 and earlier ) stores authorization tokens in unencrypted plain text within the config.xml files on the Jenkins controller. This vulnerability allows users with Item/Extended Read permissions, or anyone with access to the Jenkins controller fi...