A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of property names in property expressions on the left-hand side of assignment expressions allowed attackers to execute arbitrary code in sandboxed scripts.
References
Link | Resource |
---|---|
http://www.openwall.com/lists/oss-security/2019/09/12/2 | Mailing List Third Party Advisory |
https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1538 | Vendor Advisory |
http://www.openwall.com/lists/oss-security/2019/09/12/2 | Mailing List Third Party Advisory |
https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1538 | Vendor Advisory |
Configurations
History
21 Nov 2024, 04:19
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.openwall.com/lists/oss-security/2019/09/12/2 - Mailing List, Third Party Advisory | |
References | () https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1538 - Vendor Advisory |
Information
Published : 2019-09-12 14:15
Updated : 2024-11-21 04:19
NVD link : CVE-2019-10394
Mitre link : CVE-2019-10394
CVE.ORG link : CVE-2019-10394
JSON object : View
Products Affected
jenkins
- script_security
CWE