Sign in

Not rated

CVE-2019-1003033 A sandbox bypass vulnerability exists in Jenkins Groovy Plugin 2.1 and earlier in pom.xml,…

Description

A sandbox bypass vulnerability exists in Jenkins Groovy Plugin 2.1 and earlier in pom.xml, src/main/java/hudson/plugins/groovy/StringScriptSource.java that allows attackers with Overall/Read permission to execute arbitrary code on the Jenkins master JVM.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Groovy Plugin	Versions not published

The 2 CVEs of Jenkins Groovy Plugin →

CVE-2019-1003006 A sandbox bypass vulnerability exists in Jenkins Groovy Plugin 2.0 and earlier in… Not rated

Do you use Jenkins Groovy Plugin?

Track this CVE Watch Jenkins Groovy Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-1003033

Timeline

Published March 8, 2019
Last modified August 5, 2024

References

jenkins.io jenkins.io
107476 www.securityfocus.com

Track this CVE