1. Home
  2. Vulnerabilities
  3. CVE-2022-43405

CVE-2022-43405

CVSS v3.1 9.9 (Critical)
99% Progress
EPSS 0.12 % (48th)
0.12% Progress
Affected Products 1
Advisories 2
Info CVSS EPSS Affected Configurations References Security Advisories Packages & Software Tools, Exploits & PoC Graph Web & Social Timeline

A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da_9c54906d and earlier allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.

Weaknesses
CWE-NVD-noinfo
CVE Status
PUBLISHED
CNA
Jenkins Project
Published Date
2022-10-19 16:15:10
(23 months ago)
Updated Date
2023-11-22 21:15:57
(10 months ago)

Affected Products

Jenkins

Configuration #1

    CPE23 From Up To
  Jenkins Groovy Libraries for Jenkins 612.v84da_9c54906d and prior versions cpe:2.3:a:jenkins:groovy_libraries::*:*:*:*:jenkins <= 612.v84da_9c54906d