Vulnerability Database
289,697
Total vulnerabilities in the database
CVE-2019-10431
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.64 and earlier related to the handling of default parameter expressions in constructors allowed attackers to execute arbitrary code in sandboxed scripts.
| Software | From | Fixed in |
|---|---|---|
| jenkins / script_security | - | 1.64.x |
org.jenkins-ci.plugins / script-security
|
- | 1.65 |
- http://www.openwall.com/lists/oss-security/2019/10/01/2
- https://access.redhat.com/errata/RHSA-2019:4055
- https://access.redhat.com/errata/RHSA-2019:4089
- https://access.redhat.com/errata/RHSA-2019:4097
- https://github.com/jenkinsci/script-security-plugin/blob/7bd58b8635709cecdb50018844e5d6dbe1ce13ea/CHANGELOG.md
- https://github.com/jenkinsci/script-security-plugin/commit/415b6e2f3fa0c2e4bd2f9c4a589a9e1fc9cbac8b
- https://jenkins.io/security/advisory/2019-10-01/#SECURITY-1579