PT-2019-2579
CVE-2019-1003041
·
تاريخ النشر
2019-03-25
·
تاريخ التحديث
2023-10-25
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Jenkins Pipeline: Groovy Plugin versions 2.64 and earlier
Description
The issue is related to a sandbox bypass vulnerability in the Jenkins Pipeline: Groovy Plugin, which is associated with incorrect type conversion. This allows attackers to invoke arbitrary constructors in sandboxed scripts, potentially enabling remote attackers to execute malicious actions.
Recommendations
For Jenkins Pipeline: Groovy Plugin versions 2.64 and earlier, update to a version later than 2.64 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾