1 matches found
Sandbox bypass through type casts in script-security
Sandbox protection in script-security could be circumvented by casting crafted objects to other types. This allowed attackers able to specify sandboxed scripts to invoke constructors that weren't approved. Additionally, this could be used to read arbitrary files on the Jenkins controller. Casting...
8.8CVSS8AI score0.025EPSS
SaveExploits0Affected Software1
20