| Package | Affected versions | Patched versions |
|---|---|---|
| com.elasticbox.jenkins-ci.plugins:kubernetes-ci | ≤ 1.3 | |
| kubernetes ci | ≤ 1.3 |
ElasticBox Jenkins Kubernetes CI/CD Plugin 1.3 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types. This results in a remote code execution (RCE) vulnerability exploitable by users able to provide YAML input files to ElasticBox Jenkins Kubernetes CI/CD Plugin’s build step.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free