CVE-2020-10721

Name of the Vulnerable Software and Affected Versions fabric8-maven-plugin versions 4.0.0 and later

Description A flaw in the fabric8-maven-plugin allows for deserialization of untrusted data when using a wildfly-swarm or thorntail custom configuration with a malicious YAML configuration file, resulting in arbitrary code execution. This poses a threat to data confidentiality and integrity, as well as system availability.

Recommendations For fabric8-maven-plugin versions 4.0.0 and later, migrate to Eclipse Jkube >= 1.0.0 to resolve the issue.