RCE vulnerability in Jenkins AWS SAM Plugin
Date: 2022-05
Affected: maven/io.jenkins.plugins:aws-sam
Attack vector: rce
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2020-2178
CVE-2020-2179
CVE-2020-2180
CWE: CWE-502
CWE-611
CVSS: 8.8 (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

AWS SAM Plugin 1.2.2 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types. This results in a remote code execution (RCE) vulnerability exploitable by users able to configure a job or control the contents of a previously configured \"AWS SAM deploy application\" build step’s YAML SAM template file (`template.yaml` or equivalent) file. AWS SAM Plugin 1.2.3 configures its YAML parser to only instantiate safe types.


Mitigations:

Architectural layers (MAESTRO):