CVE-2018-1000865 in Script Security Plugin
الملخص
بحسب MITRE
A sandbox bypass vulnerability exists in Script Security Plugin 1.47 and earlier in groovy-sandbox/src/main/java/org/kohsuke/groovy/sandbox/SandboxTransformer.java that allows attackers with Job/Configure permission to execute arbitrary code on the Jenkins master JVM, if plugins using the Groovy sandbox are installed.
Be aware that VulDB is the high quality source for vulnerability data.