103 matches found
CVE-2025-31722
CVE-2025-31722 — Jenkins Templating Engine RCE 教育および許可されたセキュリティ研究目的に限ります。 説明 Jenkins Templating Engine JTE プラグイン = 2.5.3 におけるサンドボックスバイパス脆弱性であり、低権限ユーザーが Jenkins サーバー上で任意のコードを実行できるものです。 この欠陥は、JTE がフォルダーレベルの GovernanceTier 設定で定義された外部 Git リポジトリからライブラリを読み込み、ジョブを作成したユーザーの権限レベルに関係なく、それらのライブラリのステップを Groo...
Groovy-scripting-engine-CVE-2015-1427
ElasticSearch Groovy 샌드박스 우회 && 코드 실행 취약점CVE-2015-1427 테스트 환경 jre 버전: openjdk:8-jre elasticsearch 버전: v1.4.2 원리 참고 문서: http://cb.drops.wiki/drops/papers-5107.html http://jordan-wright.com/blog/2015/03/08/elasticsearch-rce-vulnerability-cve-2015-1427/ https://github.com/XiphosResearch/exploits...
exploit-CVE-2015-1427
Elasticsearch 1.4.0 1.4.2 원격 코드 실행 Elasticsearch는 점점 더 많은 사용 사례를 해결할 수 있는 분산형 RESTful 검색 및 분석 엔진입니다. Elastic Stack의 핵심으로서 데이터를 중앙에 저장하여 예상한 결과를 발견하고 예상치 못한 결과를 찾아낼 수 있게 해줍니다. 취약한 환경 테스트를 위해 취약한 환경을 설정하려면 Docker가 설치되어 있어야 하며, 다음 명령어를 실행하기만 하면 됩니다: root@kitploit: docker build -t vuln/cve-2015-1427...
jenkinsci__script-security-plugin_CVE-2023-24422_1228.vd93135a_2fb_25
Script Security Plugin ユーザーガイド CloudBees Plugins guide の Template plugin の情報 を元に翻訳・改変 さまざまな Jenkins プラグインは、ユーザーがカスタムスクリプトを定義することを要求します。最も一般的なのは Groovy 言語で、Jenkins の動作をカスタマイズするために使用されます。これらのスクリプトを書く全員が Jenkins 管理者である場合、具体的には Script Console リンクなどで使用される Overall/RunScripts...
CrafterCMS-CVE-2025-6384
CrafterCMS 인증된 RCE - Groovy 샌드박스 우회 CVE-2025-6384 인증된 사용자가 CrafterCMS에서 원격 코드 실행 취약점을 악용할 수 있는 개념 증명PoC입니다. 취약점 요약 개발자 권한이 있는 인증된 사용자는 Crafter Studio에서 Groovy 스크립트 샌드박스를 우회하여 원격 코드 실행을 달성할 수 있습니다. 샌드박스는 새로운 GroovyShell의 인스턴스화를 차단하지 못하며, 이를 통해 제한되지 않은 새로운 실행 환경을 만들 수 있습니다. 제품: CrafterCMS 구성 요소:...
CVE-2025-6384
CVE-2025-6384: CrafterCMS의 Groovy 샌드박스 우회 2 Crafter CMS의 Crafter Studio에서 동적으로 관리되는 코드 리소스Dynamically-Managed Code Resources의 부적절한 제어 취약점으로, 인증된 개발자가 Groovy 샌드박스 우회를 통해 OS 명령을 실행할 수 있습니다. 공급업체 공개: 이 취약점에 대한 공급업체의 공개 및 수정 사항은 여기에서 확인할 수 있습니다. 요구 사항: 이 취약점을 악용하려면 다음이 필요합니다: 유효한 사용자 자격 증명 개념 증명: 자세한...
CVE-2022-40635
CVE-2022-40635: CrafterCMS における Groovy サンドボックスバイパス Crafter CMS の Crafter Studio における動的管理コードリソースの不適切な制御の脆弱性により、認証された開発者が Groovy サンドボックスバイパスを介して OS コマンドを実行できる可能性があります。 ベンダーの開示: この脆弱性に関するベンダーの開示と修正は、こちら をご覧ください。 要件: この脆弱性を悪用するには以下が必要です: 有効なユーザー資格情報 概念実証: 詳細と悪用プロセスは、この PDF で確認できます。...
Apache Syncope permissions and access control vulnerabilities (CNVD-2026-30665)
Apache Syncope is an open-source digital identity management system, primarily used for authentication, authorization, and account management. There are security vulnerabilities in Apache Syncope. These vulnerabilities stem from insufficient protection of the Groovy security sandbox, which leads ...
Apache Syncope permissions and access control vulnerabilities (CNVD-2026-30660)
Apache Syncope is an open-source identity management platform, primarily used for user authentication, authorization, and account management in enterprise environments. There are security vulnerabilities in Apache Syncope. These vulnerabilities stem from a bypass of the Groovy security sandbox...
CVE-2026-63071
Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class containing untrusted code bypassing the Groovy security sandbox. This issue affects Apache Syncope: from 3.0.0-M0 through...
CVE-2026-53421
Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve remote code execution through the connector subsystem by relying on scripted connectors' REST and SQL capability to run Groovy scripts. This issue affects Apache...
CVE-2026-53421
CVE-2026-53421 affects Apache Syncope: remote code execution is possible by an administrator with adequate entitlements through the connector subsystem via scripted Groovy scripts (REST/SQL) in connectors. Affected versions: 3.0.0-M0–3.0.16, 4.0.0-M0–4.0.6, and 4.1.0-M0–4.1.1. The issue stems fro...
CVE-2026-53421 Apache Syncope: Remote Code Execution via Scripted Connector
Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve remote code execution through the connector subsystem by relying on scripted connectors' REST and SQL capability to run Groovy scripts. This issue affects Apache...
CVE-2026-53421 Apache Syncope: Remote Code Execution via Scripted Connector
Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve remote code execution through the connector subsystem by relying on scripted connectors' REST and SQL capability to run Groovy scripts. This issue affects Apache...
CVE-2026-53421 Apache Syncope: Remote Code Execution via Scripted Connector
Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve remote code execution through the connector subsystem by relying on scripted connectors' REST and SQL capability to run Groovy scripts. This issue affects Apache...
CVE-2026-63071
Apache Syncope suffers an RCE via Groovy Sandbox bypass (Improper Isolation). A privileged user can craft a malicious Groovy class that executes untrusted code, bypassing the Groovy sandbox. Affected versions: 3.0.0-M0–3.0.16; 4.0.0-M0–4.0.6; 4.1.0-M0–4.1.1. Fixes are available in versions 4.0.7 ...
CVE-2026-63071 Apache Syncope: RCE via Groovy Sandbox bypass
Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class containing untrusted code bypassing the Groovy security sandbox. This issue affects Apache Syncope: from 3.0.0-M0 through...
CVE-2026-63071
Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class containing untrusted code bypassing the Groovy security sandbox. This issue affects Apache Syncope: from 3.0.0-M0 through...
EUVD-2026-45955
Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class containing untrusted code bypassing the Groovy security sandbox. This issue affects Apache Syncope: from 3.0.0-M0 through...
CVE-2026-63071 Apache Syncope: RCE via Groovy Sandbox bypass
Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class containing untrusted code bypassing the Groovy security sandbox. This issue affects Apache Syncope: from 3.0.0-M0 through...