org.jenkins-ci.plugins:script-security

6 results · Clear filters · Feed

• Critical 9.8
  CVE-2024-34144 Public exploit EPSS 48%

  Jenkins Script Security Plugin has sandbox bypass vulnerability involving crafted constructor bodies

  A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection a…

  Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security Web / CMS Maven
  May 2, 2024
• High 8.8
  CVE-2023-24422 Public exploit

  Sandbox bypass in Jenkins Script Security Plugin

  A sandbox bypass vulnerability involving map constructors in Jenkins Script Security Plugin 1228.vd93135a_2fb_25 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execut…

  Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security Web / CMS Maven
  Jan 24, 2023
• Critical 9.9
  CVE-2019-1003029 Exploited Public exploit EPSS 74%

  Sandbox bypass in Script Security Plugin

  A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java, src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScr…

  Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security Web / CMS Maven
  Mar 8, 2019

  KEV Apr 25, 2022
• High 8.8
  CVE-2019-1003005 Public exploit EPSS 20%

  Sandbox Bypass in Script Security Plugin

  A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.50 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java that allows attackers with Overall/Read permission to provide a Groovy script…

  Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security Web / CMS Maven
  Feb 6, 2019
• High 8.8
  CVE-2019-1003001 Public exploit EPSS 86%

  Jenkins Groovy Plugin sandbox bypass vulnerability

  A sandbox bypass vulnerability exists in Pipeline: Groovy Plugin 2.61 and earlier in src/main/java/org/jenkinsci/plugins/workflow/cps/CpsFlowDefinition.java, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShellFactory.java that allows attackers wit…

  Jenkins Project Pipeline: Groovy Plugin org.jenkins-ci.plugins:script-security org.jenkins-ci.plugins:pipeline-model-definition Maven
  Jan 22, 2019
• High 8.8
  CVE-2019-1003000 Public exploit Scanner template EPSS 98%

  Protection Mechanism Failure in Jenkins Script Security Plugin

  A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java that allows attackers with the ability to provide sandboxed scripts to execute arbitrary c…

  Jenkins Project Script Security Plugin org.jenkins-ci.plugins:script-security Maven
  Jan 22, 2019