VULNERABILITY INTELLIGENCE

CVE-2020-2179

CVSS score8.8 HIGH

EPSS probability2.87%

CISA KEVNot currently listed

Published2020-04-16

Last modified2026-06-17

Description

Jenkins Yaml Axis Plugin 0.2.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.