CVE-2020-2167

Jenkins OpenShift Pipeline Plugin 1.0.56 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote…

published March 25, 2020

CVSS
—
EPSS
2%
Percentile
81.3
In the wild
Unconfirmed
What it is

Jenkins OpenShift Pipeline Plugin 1.0.56 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02077 · 81.3th percentile
Published
2020-03-25T16:05Z
EPSS history
Timeline
  • 25 MAR 16:05Z
    Jenkins OpenShift Pipeline Plugin 1.0.56 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote…
    cvelistv5