Description
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.67 and earlier related to the handling of default parameter expressions in closures allowed attackers to execute arbitrary code in sandboxed scripts.
Remediation
References
http://www.openwall.com/lists/oss-security/2019/11/21/1
https://jenkins.io/security/advisory/2019-11-21/#SECURITY-1658
Related Vulnerabilities
CVE-2020-28277 Vulnerability in maven package org.webjars.npm:dset
CVE-2020-2187 Vulnerability in maven package org.jenkins-ci.plugins:ec2
CVE-2022-36919 Vulnerability in maven package org.jenkins-ci.plugins:coverity
CVE-2018-1000613 Vulnerability in maven package org.bouncycastle:bcprov-ext-jdk15on
CVE-2022-21126 Vulnerability in maven package com.github.samtools:htsjdk