Description
Artemis Java Test Sandbox versions before 1.11.2 are vulnerable to a sandbox escape when an attacker loads untrusted libraries using System.load or System.loadLibrary. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sandboxed code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | de.tum.in.ase:artemis-java-test-sandbox | < 1.11.2 | 1.11.2 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | de.tum.in.ase:artemis-java-test-sandbox | < 1.11.2 | 1.11.2 | GHSA-98hq-4wmw-98w9 |
References
- GitHub Security Advisory (GHSA-98hq-4wmw-98w9) vendor-advisory
- GitHub Security Advisory (GHSA-98hq-4wmw-98w9) vendor-advisory
- https://vulncheck.com/advisories/vc-advisory-GHSA-98hq-4wmw-98w9 third-party-advisory