CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-03-08
Jenkins Pipeline: Groovy Plugin Sandbox Bypass Remote Code Execution (CVE-2019-1003030)
[Affected Scope] Jenkins Pipeline: Groovy Plugin 2.63 and earlier
[Impact] Attackers with pipeline script control can bypass the Groovy sandbox to execute arbitrary code on the Jenkins master JVM
[Mitigation] Immediately upgrade Jenkins Pipeline: Groovy Plugin to version 2.64 or later