Description
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling of method pointer expressions allowed attackers to execute arbitrary code in sandboxed scripts.
Remediation
References
http://www.openwall.com/lists/oss-security/2019/07/31/1
https://access.redhat.com/errata/RHSA-2019:2594
https://access.redhat.com/errata/RHSA-2019:2651
https://access.redhat.com/errata/RHSA-2019:2662
https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1465%20%282%29
Related Vulnerabilities
CVE-2022-0198 Vulnerability in maven package edu.stanford.nlp:stanford-corenlp
CVE-2020-28282 Vulnerability in npm package getobject
CVE-2019-10355 Vulnerability in maven package org.jenkins-ci.plugins:script-security
CVE-2022-25855 Vulnerability in npm package create-choo-app3
CVE-2023-39151 Vulnerability in maven package org.jenkins-ci.main:jenkins-core