A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java, src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java that allows attackers with Overall/Read permission to execute arbitrary code on the Jenkins master JVM.
History

Wed, 14 Aug 2024 00:30:00 +0000

Type Values Removed Values Added
References

cve-icon MITRE

Status: PUBLISHED

Assigner: jenkins

Published: 2019-03-08T21:00:00

Updated: 2024-08-05T03:00:19.425Z

Reserved: 2019-03-08T00:00:00

Link: CVE-2019-1003029

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-03-08T21:29:00.297

Modified: 2024-11-21T04:17:46.197

Link: CVE-2019-1003029

cve-icon Redhat

Severity : Important

Publid Date: 2019-03-06T00:00:00Z

Links: CVE-2019-1003029 - Bugzilla