CVE-2019-1003040
Fixed in a distro release EPSS 3%
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.55 and earlier allows attackers to invoke arbitrary constructors in sandboxed scripts.
Products: Jenkins project Jenkins Script Security Plugin
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.jenkins-ci.plugins:script-security | 1.56 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openshift 3.11 | jenkins-2-plugins | 0:3.11.1553788831-1.el7 |