{"id":"CVE-2019-1003005","published":"2019-02-06T16:00:00Z","modified":"2024-08-05T03:00:19Z","title":"A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.50 and earlier in…","vendor":"Jenkins","product":"Jenkins Script Security Plugin","tier":"tail","description":{"text":"A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.50 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java that allows attackers with Overall/Read permission to provide a Groovy script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.19538,"percentile":0.97368,"provenance":"source"},"cwes":[],"references":[{"url":"https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1292","tags":["x_refsource_CONFIRM"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0739","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://packetstormsecurity.com/files/166778/Jenkins-Remote-Code-Execution.html","tags":["x_refsource_MISC"]}],"priority":{"score":24.5,"factors":[{"name":"EPSS percentile","points":19.47},{"name":"Public exploit code","points":5.0}]},"exploitSources":{"metasploit":[{"name":"Jenkins ACL Bypass and Metaprogramming RCE","module":"exploit/multi/http/jenkins_metaprogramming","type":"exploit","disclosureDate":"2019-01-08","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jenkins_metaprogramming.rb"}],"first":{"date":"2019-01-08","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jenkins_metaprogramming.rb"},"provenance":"source"},"vendorSlug":"jenkins","affectedVersions":[{"vendor":"Jenkins project","product":"Jenkins Script Security Plugin","versions":["1.50 and earlier"]}],"affected":[{"ecosystem":"Maven","package":"org.jenkins-ci.plugins:script-security","vulnerableRanges":["<1.51"],"patched":["1.51"],"from":["GHSA-x5jm-rj37-5qh7"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-5719","exploited":false,"provenance":"source"},"exploitRefs":["http://packetstormsecurity.com/files/166778/Jenkins-Remote-Code-Execution.html"],"lineage":{"packageHistory":[{"cve":"CVE-2018-1000866","published":"2018-12-10","fixed":"1.48","kev":false},{"cve":"CVE-2019-1003000","published":"2019-01-22","fixed":"1.50","kev":false},{"cve":"CVE-2019-1003001","published":"2019-01-22","fixed":"1.50","kev":false,"link":{"from":"CVE-2019-1003001","to":"CVE-2019-1003005","relation":"successor","confidence":"medium","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.jenkins-ci.plugins:script-security","fromFixed":"1.50","toFixed":"1.51","daysApart":15},{"kind":"similar","provenance":"machine","score":0.59,"basis":"same package + description similarity"}]}},{"cve":"CVE-2019-1003005","published":"2019-02-06","fixed":"1.51","kev":false},{"cve":"CVE-2019-1003024","published":"2019-02-20","fixed":"1.53","kev":false,"link":{"from":"CVE-2019-1003005","to":"CVE-2019-1003024","relation":"successor","confidence":"medium","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.jenkins-ci.plugins:script-security","fromFixed":"1.51","toFixed":"1.53","daysApart":14},{"kind":"similar","provenance":"machine","score":0.49,"basis":"same product + description similarity"}]}},{"cve":"CVE-2019-1003029","published":"2019-03-08","fixed":"1.54","kev":true},{"cve":"CVE-2019-1003040","published":"2019-03-28","fixed":"1.56","kev":false}],"package":"Maven:org.jenkins-ci.plugins:script-security"}}