Lucene search
MitreCVELIST:CVE-2018-1000865HistoryDec 10, 2018 - 2:00 p.m.
CVE-2018-1000865
2018-12-1014:00:00
mitre
www.cve.org
1
0.003 Low
EPSS
Percentile
71.2%
A sandbox bypass vulnerability exists in Script Security Plugin 1.47 and earlier in groovy-sandbox/src/main/java/org/kohsuke/groovy/sandbox/SandboxTransformer.java that allows attackers with Job/Configure permission to execute arbitrary code on the Jenkins master JVM, if plugins using the Groovy sandbox are installed.
Related
osv
osv
Improper Privilege Management in Jenkins
2022-05-13 01:48:40
CVE-2018-1000865
2018-12-10 14:29:01
prion
prion
Security feature bypass
2018-12-10 14:29:00
nvd
nvd
CVE-2018-1000865
2018-12-10 14:29:01
cve
cve
CVE-2018-1000865
2018-12-10 14:29:01
veracode
veracode
Sandbox Restrictions Bypass
2019-05-16 03:24:00
github
github
Improper Privilege Management in Jenkins
2022-05-13 01:48:40
redhatcve
redhatcve
CVE-2018-1000866
2020-04-08 20:50:40
CVE-2018-1000865
2019-10-23 18:34:18