Staging Environment: Content and features may be unstable or change without notice.

Extra Mitigation Curation

github_osv/GHSA-x3jj-rgw9-7r5g

Progress 0 / 0

Advisory Summary

github_osv/GHSA-x3jj-rgw9-7r5g

RCE vulnerability in Jenkins DotCi Plugin DotCi Plugin 2.40.00 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types. This results in a remote code execution (RCE) vulnerability exploitable by attackers able to modify `.ci.yml` files in SCM. This plugin has been suspended.
Mitigation Type Mitigation Data Mitigation Note