Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
JenkinsScript Security

13 matches found

CVE
CVE•added 2019/03/08 9:29 p.m.•1000 views

CVE-2019-1003029

A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java, src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java that allows attackers with Over...

9.9CVSS9.6AI score0.91443EPSS
CVE
CVE•added 2019/01/22 2:29 p.m.•232 views

CVE-2019-1003000

A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java that allows attackers with the ability to provide sandboxed scripts to execute arbitrary code on the Jenkins master JVM.

8.8CVSS8.8AI score0.94235EPSS
CVE
CVE•added 2019/11/21 3:15 p.m.•112 views

CVE-2019-16538

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.67 and earlier related to the handling of default parameter expressions in closures allowed attackers to execute arbitrary code in sandboxed scripts.

8.8CVSS8.8AI score0.00176EPSS
CVE
CVE•added 2019/09/12 2:15 p.m.•109 views

CVE-2019-10394

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of property names in property expressions on the left-hand side of assignment expressions allowed attackers to execute arbitrary code in sandboxed scripts.

4.9CVSS5AI score0.00221EPSS
CVE
CVE•added 2019/09/12 2:15 p.m.•108 views

CVE-2019-10399

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of property names in property expressions in increment and decrement expressions allowed attackers to execute arbitrary code in sandboxed scripts.

4.9CVSS5.1AI score0.00221EPSS
CVE
CVE•added 2019/10/01 2:15 p.m.•102 views

CVE-2019-10431

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.64 and earlier related to the handling of default parameter expressions in constructors allowed attackers to execute arbitrary code in sandboxed scripts.

9.9CVSS9.5AI score0.00407EPSS
CVE
CVE•added 2019/09/12 2:15 p.m.•101 views

CVE-2019-10393

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of method names in method call expressions allowed attackers to execute arbitrary code in sandboxed scripts.

4.9CVSS5.1AI score0.00221EPSS
CVE
CVE•added 2019/09/12 2:15 p.m.•99 views

CVE-2019-10400

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of subexpressions in increment and decrement expressions not involving actual assignment allowed attackers to execute arbitrary code in sandboxed scripts.

4.9CVSS5.2AI score0.00221EPSS
CVE
CVE•added 2019/02/06 4:29 p.m.•90 views

CVE-2019-1003005

A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.50 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java that allows attackers with Overall/Read permission to provide a Groovy script to an HTTP endpoint that can result in ...

8.8CVSS8.8AI score0.73755EPSS
CVE
CVE•added 2019/03/28 6:29 p.m.•79 views

CVE-2019-1003040

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.55 and earlier allows attackers to invoke arbitrary constructors in sandboxed scripts.

9.8CVSS9.4AI score0.02252EPSS
CVE
CVE•added 2019/07/31 1:15 p.m.•73 views

CVE-2019-10355

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling of type casts allowed attackers to execute arbitrary code in sandboxed scripts.

8.8CVSS8.8AI score0.00042EPSS
CVE
CVE•added 2019/07/31 1:15 p.m.•64 views

CVE-2019-10356

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling of method pointer expressions allowed attackers to execute arbitrary code in sandboxed scripts.

8.8CVSS8.8AI score0.00042EPSS
CVE
CVE•added 2019/02/20 9:29 p.m.•57 views

CVE-2019-1003024

A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.52 and earlier in RejectASTTransformsCustomizer.java that allows attackers with Overall/Read permission to provide a Groovy script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.

8.8CVSS8.8AI score0.0032EPSS