CVE-2020-2121

—

CVSS 3.1

8.8 high

EPSS

3%p85

Published

Feb 12, 2020 (Feb 12, 2020)

Modified

Jun 17, 2026

Description

Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.

Vendors: jenkins
Products: google kubernetes engine
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.7%)

In the news0 stories

No ingested article mentions this CVE yet.