A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of property names in property expressions on the left-hand side of assignment expressions allowed attackers to execute arbitrary code in sandboxed scripts.
References
Link | Resource |
---|---|
http://www.openwall.com/lists/oss-security/2019/09/12/2 | Mailing List Third Party Advisory |
https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1538 | Vendor Advisory |
Configurations
History
No history.
Information
Published : 2019-09-12 14:15
Updated : 2024-02-28 17:08
NVD link : CVE-2019-10394
Mitre link : CVE-2019-10394
CVE.ORG link : CVE-2019-10394
JSON object : View
Products Affected
jenkins
- script_security
CWE