Not rated

CVE-2019-10306 A sandbox bypass vulnerability in Jenkins ontrack Plugin 3.4 and earlier allowed attackers with control over ontrack DSL…

Description

A sandbox bypass vulnerability in Jenkins ontrack Plugin 3.4 and earlier allowed attackers with control over ontrack DSL definitions to execute arbitrary code on the Jenkins master JVM.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins ontrack Plugin	Versions not published

Do you use Jenkins ontrack Plugin?

Track this CVE Watch Jenkins ontrack Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-10306

Timeline

Published April 18, 2019
Last modified August 4, 2024

References

108045 www.securityfocus.com
jenkins.io jenkins.io

Track this CVE