Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2017-1000107

Script Security Plugin did not apply sandboxing restrictions to constructor invocations via positional arguments list, super constructor invocations, method references, and type coercion expressions. This could be used to invoke arbitrary constructors and methods, bypassing sandbox protection.

  • Published: Oct 5, 2017
  • Updated: Nov 9, 2025
  • CVE: CVE-2017-1000107
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
jenkins / script_security 1.30 1.30.x