CVE-2020-2158

Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code…

published March 9, 2020

CVSS
—
EPSS
3%
Percentile
86.7
In the wild
Unconfirmed
What it is

Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02867 · 86.7th percentile
Published
2020-03-09T15:01Z
EPSS history
Timeline
  • 09 MAR 15:01Z
    Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code…
    cvelistv5