CVE-2019-10355
Fixed in a distro release EPSS 2%
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling of type casts allowed attackers to execute arbitrary code in sandboxed scripts.
Products: Jenkins project Jenkins Script Security Plugin
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.jenkins-ci.plugins:script-security | 1.62 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openshift 3.11 | jenkins-2-plugins | 0:3.11.1566492396-1.el7 |
| Red Hat openshift 4.1 | jenkins-2-plugins | 0:4.1.1567707934-1.el7 |