Skip to content
Sign in
Not rated

CVE-2019-1003006 A sandbox bypass vulnerability exists in Jenkins Groovy Plugin 2.0 and earlier in…

Description

A sandbox bypass vulnerability exists in Jenkins Groovy Plugin 2.0 and earlier in src/main/java/hudson/plugins/groovy/StringScriptSource.java that allows attackers with Overall/Read permission to provide a Groovy script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.

Affected products and versions

Product Affected versions Fixed in
Jenkins Groovy Plugin Versions not published

Other CVEs of Jenkins Groovy Plugin

The 2 CVEs of Jenkins Groovy Plugin →
CVE-2019-1003033 A sandbox bypass vulnerability exists in Jenkins Groovy Plugin 2.1 and earlier in pom.xml,… Not rated
Track this CVE