CVE-2022-43406

CVSS v3.1 9.9 (Critical)

EPSS 0.12 % (48^th)

Affected Products 1

Advisories 2

A sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin 583.vf3b_454e43966 and earlier allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.

Weaknesses

CWE-NVD-noinfo

CVE Status: PUBLISHED
CNA: Jenkins Project
Published Date: 2022-10-19 16:15:10
(23 months ago)
Updated Date: 2023-11-22 21:15:18
(10 months ago)

Affected Products

Jenkins

Groovy Libraries

Configuration #1

		CPE23	From	Up To
	Jenkins Groovy Libraries for Jenkins 583.vf3b_454e43966 and prior versions	cpe:2.3:a:jenkins:groovy_libraries::::::jenkins		<= 583.vf3b_454e43966