CVE-2018-1000865 in Script Security Plugin정보

요약

\~에 의해 MITRE

A sandbox bypass vulnerability exists in Script Security Plugin 1.47 and earlier in groovy-sandbox/src/main/java/org/kohsuke/groovy/sandbox/SandboxTransformer.java that allows attackers with Job/Configure permission to execute arbitrary code on the Jenkins master JVM, if plugins using the Groovy sandbox are installed.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

예약하다

2018. 12. 10.

공개

2018. 12. 10.

모더레이션

수락

항목

VDB-127778

CPE

준비됨

CWE

CWE-269 (확인됨)

CVSS

8.8 (NVD)

EPSS

0.01639

KEV

아니요

활동

매우 낮음

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2018-1000865
NVD	https://nvd.nist.gov/vuln/detail/CVE-2018-1000865
CVE Details	https://www.cvedetails.com/cve/CVE-2018-1000865/

◂ 이전 개요 다음 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!