CVE-2023-24422

🗓️ 26 Jan 2023 21:16:18Reported by jenkinsType

CVE-2023-24422: Jenkins Script Security Plugin sandbox bypas

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 55
OSV	CVE-2023-24422	26 Jan 202321:18	–	osv
OSV	Sandbox bypass in Jenkins Script Security Plugin	26 Jan 202321:30	–	osv
OSV	RHSA-2023:3195 Red Hat Security Advisory: jenkins and jenkins-2-plugins security update	30 Sep 202407:07	–	osv
OSV	RHSA-2023:7288 Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 Openshift Jenkins security update	1 Oct 202423:31	–	osv
OSV	RHSA-2023:6179 Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update	2 Oct 202411:28	–	osv
OSV	RHSA-2024:0776 Red Hat Security Advisory: jenkins and jenkins-2-plugins security update	30 Sep 202407:10	–	osv
OSV	RHSA-2023:6171 Red Hat Security Advisory: Red Hat Product OCP Tools 4.11 Openshift Jenkins security update	2 Oct 202411:28	–	osv
OSV	RHSA-2023:1655 Red Hat Security Advisory: OpenShift Container Platform 4.10.56 security update	30 Sep 202407:06	–	osv
OSV	RHSA-2024:0775 Red Hat Security Advisory: jenkins and jenkins-2-plugins security update	30 Sep 202416:32	–	osv
OSV	RHSA-2023:6172 Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update	2 Oct 202411:28	–	osv

Nvd

Node

jenkins script_securityRange<1229.v4880b_b_e905a_6jenkins

[
  {
    "product": "Jenkins Script Security Plugin",
    "vendor": "Jenkins Project",
    "versions": [
      {
        "lessThanOrEqual": "1228.vd93135a_2fb_25",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "1175.1180.v36a_3fb_2dec9c"
      }
    ]
  }
]

Source	Link
jenkins	www.jenkins.io/security/advisory/2023-01-24/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Jan 2023 21:18Current

9.1High risk

Vulners AI Score9.1

CVSS38.8

EPSS0.00012

SSVC

CWE-78