org.jenkins-ci.plugins:script-security

2 results · Clear filters · Feed

• Critical 9.8
  CVE-2024-34144 Public exploit EPSS 48%

  Jenkins Script Security Plugin has sandbox bypass vulnerability involving crafted constructor bodies

  A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection a…

  Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security Web / CMS Maven
  May 2, 2024
• Critical 9.9
  CVE-2019-1003029 Exploited Public exploit EPSS 74%

  Sandbox bypass in Script Security Plugin

  A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java, src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScr…

  Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security Web / CMS Maven
  Mar 8, 2019

  KEV Apr 25, 2022