Yaml Axis

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-2179 Maven HIGH PATCH This Week

Jenkins Yaml Axis Plugin 0.2.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Deserialization Jenkins Yaml Axis

NVD

CVSS 3.1

8.8

EPSS

2.9%

CVE-2020-2179 Maven

EPSS 3% CVSS 8.8

HIGH PATCH This Week

Jenkins Yaml Axis Plugin 0.2.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Deserialization Jenkins +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy