1. Home
  2. Vulnerabilities
  3. CVE-2022-43403

CVE-2022-43403

CVSS v3.1 9.9 (Critical)
99% Progress
EPSS 0.28 % (69th)
0.28% Progress
Affected Products 1
Advisories 1
Info CVSS EPSS Affected Configurations References Security Advisories Packages & Software Tools, Exploits & PoC Graph Web & Social Timeline

A sandbox bypass vulnerability involving casting an array-like value to an array type in Jenkins Script Security Plugin 1183.v774b_0b_0a_a_451 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.

Weaknesses
CWE-NVD-noinfo
CVE Status
PUBLISHED
CNA
Jenkins Project
Published Date
2022-10-19 16:15:10
(23 months ago)
Updated Date
2023-11-22 21:16:10
(10 months ago)

Affected Products

Jenkins

Configuration #1

    CPE23 From Up To
  Jenkins Script Security for Jenkins 1183.v774b_0b_0a_a_451 and prior versions cpe:2.3:a:jenkins:script_security::*:*:*:*:jenkins <= 1183.v774b_0b_0a_a_451