Return of Pointer Value Outside of Expected Rang in Jenkins Script Security Plugin

GHSA-x25x-j4w4-7m59 · CVE-2019-10356

Published May 24, 2022 · Modified Nov 8, 2023

Description

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling of method pointer expressions allowed attackers to execute arbitrary code in sandboxed scripts.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2019-10356
WEB https://access.redhat.com/errata/RHSA-2019:2594
WEB https://access.redhat.com/errata/RHSA-2019:2651
WEB https://access.redhat.com/errata/RHSA-2019:2662
WEB https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1465%20(2)
WEB http://www.openwall.com/lists/oss-security/2019/07/31/1

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes