VULNERABILITY INTELLIGENCE

CVE-2020-2211

CVSS score8.8 HIGH
EPSS probability2.28%
CISA KEVNot currently listed
Published2020-07-02
Last modified2026-06-17

Description

Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin 1.3 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.