CVE-2019-10394
Fixed in a distro release EPSS 1%
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of property names in property expressions on the left-hand side of assignment expressions allowed attackers to execute arbitrary code in sandboxed scripts.
Products: Jenkins project Jenkins Script Security Plugin
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.jenkins-ci.plugins:script-security | 1.63 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openshift 3.11 | jenkins-2-plugins | 0:3.11.1575261255-1.el7 |
| Red Hat openshift 4.1 | jenkins-2-plugins | 0:4.1.1574872364-1.el7 |
| Red Hat openshift 4.2 | jenkins-2-plugins | 0:4.2.1574873592-1.el7 |