CVE-2019-1003033

A sandbox bypass vulnerability exists in Jenkins Groovy Plugin 2.1 and earlier in pom.xml, src/main/java/hudson/plugins/groovy/StringScriptSource.java that…

published March 8, 2019

CVSS
—
EPSS
3%
Percentile
84.6
In the wild
Unconfirmed
What it is

A sandbox bypass vulnerability exists in Jenkins Groovy Plugin 2.1 and earlier in pom.xml, src/main/java/hudson/plugins/groovy/StringScriptSource.java that allows attackers with Overall/Read permission to execute arbitrary code on the Jenkins master JVM.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02507 · 84.6th percentile
Published
2019-03-08T21:00Z
EPSS history
Timeline
  • 08 MAR 21:00Z
    A sandbox bypass vulnerability exists in Jenkins Groovy Plugin 2.1 and earlier in pom.xml, src/main/java/hudson/plugins/groovy/StringScriptSource.java that…
    cvelistv5