CVE-2020-10721
1 advisory.
Maven/io.fabric8:fabric8-maven-plugin CVE-2020-10721: high 7.8
fabric8-maven-plugin: insecure way to construct Yaml Object leading to remote code execution
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0-M1 | - | 4.4.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-w7gj-h6f2-x4c6
- https://nvd.nist.gov/vuln/detail/CVE-2020-10721
- https://bugzilla.redhat.com/show_bug.cgi?id=1827201
- https://github.com/fabric8io/fabric8-maven-plugin
CVE-2020-10721 · published · modified · JSON