Skip to content
Not rated

CVE-2020-2123 Jenkins RadarGun Plugin 1.7 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary…

Description

Jenkins RadarGun Plugin 1.7 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.

Affected products and versions

Product Affected versions Fixed in
Jenkins RadarGun Plugin 1.7 earliest → 1.7 No fix stated
Track this CVE