Archive

8 March 2019

Vulnerabilities first published on this day (UTC), newest first.

← February 2019 2019 / March /8 April 2019 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.9

CVE-2019-1003029 Exploited Public exploit EPSS 74%

Sandbox bypass in Script Security Plugin

A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java, src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScr…

Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security Web / CMS Maven

Mar 8, 2019
KEV Apr 25, 2022
Critical 9.9

CVE-2019-1003030 Exploited Public exploit Scanner template EPSS 97%

Sandbox bypass in Jenkins Pipeline: Groovy Plugin

A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShell.java that allows attackers able to control pipeline scripts to execute arbitrary code on the …

Jenkins Project Jenkins Pipeline: Groovy Plugin org.jenkins-ci.plugins.workflow:workflow-cps Web / CMS Maven

Mar 8, 2019
KEV Mar 25, 2022