Groovy-scripting-engine-CVE-2015-1427

Entorno de prueba de la omisión del sandbox de Groovy y ejecución de código en ElasticSearch CVE-2015-1427 Versión de JRE: openjdk:8-jre Versión de Elasticsearch: v1.4.2 Principio Artículos de referencia: http://cb.drops.wiki/drops/papers-5107.html...

jenkinsci__script-security-plugin_CVE-2023-24422_1228.vd93135a_2fb_25

脚本安全插件 用户指南 （改编自 CloudBees 插件指南中 模板插件 的信息） 多个 Jenkins 插件要求用户定义自定义脚本，最常见的是使用 Groovy 语言，以定制 Jenkins 的行为。如果编写这些脚本的每个人都是 Jenkins 管理员——特别是拥有 Overall/RunScripts 权限（例如脚本控制台链接所使用的权限）——那么他们可以编写任何他们喜欢的脚本。这些脚本可以使用插件所用的相同 API 直接引用 Jenkins 内部对象。这类用户必须完全受信任，因为他们可以对 Jenkins 做任何事情（甚至更改其安全设置或在服务器上运行 shell 命令）。...

exploit-CVE-2015-1427

Elasticsearch 1.4.0 1.4.2 远程代码执行 Elasticsearch 是一个分布式、RESTful 搜索与分析引擎，能够解决越来越多的使用场景。作为 Elastic Stack 的核心，它集中存储数据，使你能够发现已知并揭示未知。 漏洞环境 要为测试搭建漏洞环境，你需要安装 Docker，然后运行以下命令： root@kitploit: docker build -t vuln/cve-2015-1427 . docker run --rm -it -p 9200:9200 vuln/cve-2015-1427 这将在你的主机上的 9200 端口启动一个漏洞 We...

CVE-2025-6384

CVE-2025-6384: CrafterCMS 中的 Groovy 沙盒绕过 2 Crafter CMS 的 Crafter Studio 中存在动态管理代码资源控制不当的漏洞，允许经过身份验证的开发人员通过 Groovy 沙盒绕过执行操作系统命令。 供应商披露： 该漏洞的供应商披露和修复可以在此处找到。 要求： 此漏洞需要： 有效的用户凭据 概念验证： 更多详细信息和利用过程可以在该PDF中找到。...

CVE-2022-40635

CVE-2022-40635：CrafterCMS 中的 Groovy 沙箱绕过 Crafter CMS 的 Crafter Studio 中存在对动态管理代码资源的控制不当漏洞，允许经过身份验证的开发人员通过 Groovy 沙箱绕过执行操作系统命令。 厂商披露： 该漏洞的厂商披露和修复方案可在此处查看。 要求： 此漏洞需要： 有效的用户凭据 概念验证： 更多详细信息和利用过程可在此 PDF 中查看。...

CrafterCMS-CVE-2025-6384

CrafterCMS 认证后的RCE - Groovy沙箱绕过 CVE-2025-6384 这是针对 CrafterCMS 中认证后远程代码执行漏洞的概念验证。 漏洞概要 拥有开发者权限的认证用户可以绕过 Crafter Studio 中的 Groovy 脚本沙箱，实现远程代码执行（RCE）。该沙箱未能阻止实例化新的 GroovyShell，而后者可用于创建新的、无限制的执行环境。 产品: CrafterCMS 组件: Crafter Studio 漏洞: 通过 Groovy 沙箱绕过实现认证后RCE CWE-913 影响: 服务器完全沦陷 实验环境搭建/部署 你可以使用官方 Docke...

CVE-2025-31722

CVE-2025-31722 — Jenkins Templating Engine RCE 仅供教育和授权安全研究使用。 描述 绕过 Jenkins Templating Engine JTE 插件 = 2.5.3 的沙箱漏洞，允许低权限用户在 Jenkins 服务器上执行任意代码。 该缺陷的发生是由于 JTE 从文件夹级 GovernanceTier 配置中定义的外部 git 仓库加载库，并在 Groovy 沙箱之外 执行这些库中的步骤，无论创建作业的用户权限级别如何。 CVSS： 8.8（高危） 类型： 沙箱绕过 → RCE 受影响组件：...

CVE-2026-47424 OpenAM Authenticated RCE via Groovy Sandbox Escape

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, GroovySandboxValueFilter permits an authenticated server-side script author to escape the scripting sandbox despite the default class allow and deny lists. A user such as a sub-realm RealmAdmin who can create or edit...

CVE-2026-77147

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy Command class containing untrusted code in their CommandArgs static implementation, bypassing the Groovy security...

EUVD-2026-77457

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy Command class containing untrusted code in their CommandArgs static implementation, bypassing the Groovy security...

CVE-2026-77147 Apache Syncope: Groovy Sandbox escape for empty CommandArgs

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy Command class containing untrusted code in their CommandArgs static implementation, bypassing the Groovy security...

CVE-2026-77147

CVE-2026-77147 is a code injection vulnerability in Apache Syncope where an administrator with adequate entitlements for Implementations can create a malicious Groovy Command class with untrusted code in the CommandArgs static implementation, bypassing the Groovy security sandbox . This effective...

Apache Syncope permissions and access control vulnerabilities (CNVD-2026-30665)

Apache Syncope is an open-source digital identity management system, primarily used for authentication, authorization, and account management. There are security vulnerabilities in Apache Syncope. These vulnerabilities stem from insufficient protection of the Groovy security sandbox, which leads ...

Apache Syncope permissions and access control vulnerabilities (CNVD-2026-30660)

Apache Syncope is an open-source identity management platform, primarily used for user authentication, authorization, and account management in enterprise environments. There are security vulnerabilities in Apache Syncope. These vulnerabilities stem from a bypass of the Groovy security sandbox...

CVE-2026-63071

Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class containing untrusted code bypassing the Groovy security sandbox. This issue affects Apache Syncope: from 3.0.0-M0 through...

CVE-2026-53421

Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve remote code execution through the connector subsystem by relying on scripted connectors' REST and SQL capability to run Groovy scripts. This issue affects Apache...

CVE-2026-53421 Apache Syncope: Remote Code Execution via Scripted Connector

Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve remote code execution through the connector subsystem by relying on scripted connectors' REST and SQL capability to run Groovy scripts. This issue affects Apache...

CVE-2026-53421 Apache Syncope: Remote Code Execution via Scripted Connector

Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve remote code execution through the connector subsystem by relying on scripted connectors' REST and SQL capability to run Groovy scripts. This issue affects Apache...

CVE-2026-53421

Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve remote code execution through the connector subsystem by relying on scripted connectors' REST and SQL capability to run Groovy scripts. This issue affects Apache...

CVE-2026-53421 Apache Syncope: Remote Code Execution via Scripted Connector

Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve remote code execution through the connector subsystem by relying on scripted connectors' REST and SQL capability to run Groovy scripts. This issue affects Apache...