Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2020/04/01 11:01 a.m.•27 views

CVE-2019-10393

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of method names in method call expressions allowed attackers to execute arbitrary code in sandboxed scripts...

4.9CVSS4.4AI score0.01038EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2019/12/17 2:18 a.m.•16 views

jenkins-script-security-plugin: handling of method names in method call expressions allowed attackers to execute arbitrary code in sandboxed scripts

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of method names in method call expressions allowed attackers to execute arbitrary code in sandboxed scripts...

4.9CVSS6.2AI score0.01038EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2019/12/11 8:38 a.m.•17 views

jenkins-script-security-plugin: handling of method names in method call expressions allowed attackers to execute arbitrary code in sandboxed scripts

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of method names in method call expressions allowed attackers to execute arbitrary code in sandboxed scripts...

4.9CVSS6.2AI score0.01038EPSS
SaveExploits0References5
CVE
CVE
•added 2019/09/12 1:55 p.m.•139 views

CVE-2019-10393

The CVE-2019-10393 entry concerns a sandbox bypass in Jenkins Script Security Plugin (version 1.62 and earlier). The connected documents describe a flaw in how method names are handled in method call expressions, which could allow an attacker to bypass the sandbox and execute arbitrary code withi...

4.9CVSS5.1AI score0.01038EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/12 12:00 a.m.•5 views

CVE-2019-10393: Undefined Security Weakness

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of method names in method call expressions allowed attackers to execute arbitrary code in sandboxed scripts...

4.9CVSS7.3AI score0.01038EPSS
SaveExploits0References1
Rows per page
Query Builder