| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:script-security | < 1.51 | 1.51 |
| script security | ≤ 1.50 |
A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.50 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java that allows attackers with Overall/Read permission to provide a Groovy script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free