high8.8
CVE-2020-2180
Jenkins AWS SAM Plugin 1.2.2 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code executi…
Impact
Jenkins AWS SAM Plugin 1.2.2 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Amazon Web Services Serverless Application Model | through 1.2.2 |