← back
CVE-2019-16538

CVE-2019-16538

EPSS 1.4%
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.67 and earlier related to the handling of default parameter expressions in closures allowed attackers to execute arbitrary code in sandboxed scripts.
Affected products
Jenkins project · Jenkins Script Security Plugin

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://jenkins.io/security/advisory/2019-11-21/#SECURITY-1658http://www.openwall.com/lists/oss-security/2019/11/21/1