Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2019/07/31 12:00 a.m.•23 views

Sandbox bypass through type casts in script-security

Sandbox protection in script-security could be circumvented by casting crafted objects to other types. This allowed attackers able to specify sandboxed scripts to invoke constructors that weren't approved. Additionally, this could be used to read arbitrary files on the Jenkins controller. Casting...

8.8CVSS8AI score0.025EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder