CVE-2019-10418

CVSS v3.1 9.9 (Critical)

CVSS v2.0 6.5 (Medium)

EPSS 0.10 % (43^th)

Affected Products 1

Advisories 2

Jenkins Kubernetes :: Pipeline :: Arquillian Steps Plugin provides a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.

Weaknesses

CWE-NVD-Other

CVE Status: PUBLISHED
CNA: Jenkins Project
Published Date: 2019-09-25 16:15:11
(5 years ago)
Updated Date: 2023-10-25 18:16:22
(10 months ago)

Affected Products

Jenkins

Kubernetes Pipeline

Configuration #1

		CPE23	From	Up To
	Jenkins Kubernetes Pipeline for Jenkins 1.6 and prior versions	cpe:2.3:a:jenkins:kubernetes_pipeline::::::jenkins		<= 1.6