Lucene search
+L

jenkins-plugin-script-security: Sandbox Bypass in Script Security Plugin

🗓️ 20 Feb 2019 14:11:43Reported by RedHatType 
redhat
 redhat
🔗 access.redhat.com👁 21 Views

Sandbox bypass in Jenkins Script Security enables code execution via unsafe Groovy AST transforms.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for CVE-2019-1003000
24 Apr 201923:52
githubexploit
githubexploit
GithubExploit
Exploit for CVE-2019-1003000
15 Feb 201905:59
githubexploit
githubexploit
GithubExploit
Exploit for OS Command Injection in Pfsense
26 Apr 201702:03
githubexploit
zdt
zdt
Jenkins Plugin Script Security 1.49/Declarative 1.3.4/Groovy 2.60 - Remote Code Execution Exploit
25 Feb 201900:00
zdt
zdt
zdt
Jenkins 2.137 and Pipeline Groovy Plugin 2.61 - ACL Bypass and Metaprogramming RCE Exploit
19 Mar 201900:00
zdt
gitee
Gitee
Exploit for CVE-2019-1003000
18 Jul 202023:27
gitee
gitee
Gitee
Exploit for CVE-2019-1003000
31 Mar 202111:15
gitee
gitee
Gitee
Exploit for CVE-2019-1003000
7 Feb 202115:45
gitee
gitee
Gitee
Exploit for CVE-2019-1003000
19 Jan 202017:01
gitee
circl
Circl
CVE-2019-1003000
19 Feb 201900:00
circl
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Red Hat Enterprise Linux7ppc64leatomic-enterprise-service-catalog1:3.11.82-1.git.1673.133961e.el7atomic-enterprise-service-catalog-1:3.11.82-1.git.1673.133961e.el7.ppc64le.rpm
Red Hat Enterprise Linux7x86_64atomic-enterprise-service-catalog1:3.11.82-1.git.1673.133961e.el7atomic-enterprise-service-catalog-1:3.11.82-1.git.1673.133961e.el7.x86_64.rpm
Red Hat Enterprise Linux7ppc64leatomic-enterprise-service-catalog-svcat1:3.11.82-1.git.1673.133961e.el7atomic-enterprise-service-catalog-svcat-1:3.11.82-1.git.1673.133961e.el7.ppc64le.rpm
Red Hat Enterprise Linux7x86_64atomic-enterprise-service-catalog-svcat1:3.11.82-1.git.1673.133961e.el7atomic-enterprise-service-catalog-svcat-1:3.11.82-1.git.1673.133961e.el7.x86_64.rpm
Red Hat Enterprise Linux7ppc64leatomic-openshift3.11.82-1.git.0.08bc31b.el7atomic-openshift-3.11.82-1.git.0.08bc31b.el7.ppc64le.rpm
Red Hat Enterprise Linux7x86_64atomic-openshift3.11.82-1.git.0.08bc31b.el7atomic-openshift-3.11.82-1.git.0.08bc31b.el7.x86_64.rpm
Red Hat Enterprise Linux7ppc64leatomic-openshift-clients3.11.82-1.git.0.08bc31b.el7atomic-openshift-clients-3.11.82-1.git.0.08bc31b.el7.ppc64le.rpm
Red Hat Enterprise Linux7x86_64atomic-openshift-clients3.11.82-1.git.0.08bc31b.el7atomic-openshift-clients-3.11.82-1.git.0.08bc31b.el7.x86_64.rpm
Red Hat Enterprise Linux7x86_64atomic-openshift-clients-redistributable3.11.82-1.git.0.08bc31b.el7atomic-openshift-clients-redistributable-3.11.82-1.git.0.08bc31b.el7.x86_64.rpm
Red Hat Enterprise Linux7ppc64leatomic-openshift-cluster-autoscaler3.11.82-1.git.0.efb6af0.el7atomic-openshift-cluster-autoscaler-3.11.82-1.git.0.efb6af0.el7.ppc64le.rpm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

04 Aug 2026 21:47Current
7High risk
Vulners AI Score7
CVSS 26.5
CVSS 3.18.8
EPSS0.98428
21