CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-43401

A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Script Security Plugin 1183.v774b_0b_0a_a_451 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 30.4%

CVSS Severity

CVSS v3 Score 9.9

References

Products affected by CVE-2022-43401

Jenkins » Script Security » Version: 1.0

cpe:2.3:a:jenkins:script_security:1.0
Jenkins » Script Security » Version: 1.1

cpe:2.3:a:jenkins:script_security:1.1
Jenkins » Script Security » Version: 1.10

cpe:2.3:a:jenkins:script_security:1.10
Jenkins » Script Security » Version: 1.11

cpe:2.3:a:jenkins:script_security:1.11
Jenkins » Script Security » Version: 1.12

cpe:2.3:a:jenkins:script_security:1.12
Jenkins » Script Security » Version: 1.13

cpe:2.3:a:jenkins:script_security:1.13
Jenkins » Script Security » Version: 1.14

cpe:2.3:a:jenkins:script_security:1.14
Jenkins » Script Security » Version: 1.15

cpe:2.3:a:jenkins:script_security:1.15
Jenkins » Script Security » Version: 1.16

cpe:2.3:a:jenkins:script_security:1.16
Jenkins » Script Security » Version: 1.17

cpe:2.3:a:jenkins:script_security:1.17
Jenkins » Script Security » Version: 1.18

cpe:2.3:a:jenkins:script_security:1.18
Jenkins » Script Security » Version: 1.18.1

cpe:2.3:a:jenkins:script_security:1.18.1
Jenkins » Script Security » Version: 1.19

cpe:2.3:a:jenkins:script_security:1.19
Jenkins » Script Security » Version: 1.2

cpe:2.3:a:jenkins:script_security:1.2
Jenkins » Script Security » Version: 1.20

cpe:2.3:a:jenkins:script_security:1.20
Jenkins » Script Security » Version: 1.21

cpe:2.3:a:jenkins:script_security:1.21
Jenkins » Script Security » Version: 1.22

cpe:2.3:a:jenkins:script_security:1.22
Jenkins » Script Security » Version: 1.23

cpe:2.3:a:jenkins:script_security:1.23
Jenkins » Script Security » Version: 1.24

cpe:2.3:a:jenkins:script_security:1.24
Jenkins » Script Security » Version: 1.25

cpe:2.3:a:jenkins:script_security:1.25
Jenkins » Script Security » Version: 1.26

cpe:2.3:a:jenkins:script_security:1.26
Jenkins » Script Security » Version: 1.27

cpe:2.3:a:jenkins:script_security:1.27
Jenkins » Script Security » Version: 1.28

cpe:2.3:a:jenkins:script_security:1.28
Jenkins » Script Security » Version: 1.29

cpe:2.3:a:jenkins:script_security:1.29
Jenkins » Script Security » Version: 1.29.1

cpe:2.3:a:jenkins:script_security:1.29.1
Jenkins » Script Security » Version: 1.3

cpe:2.3:a:jenkins:script_security:1.3
Jenkins » Script Security » Version: 1.30

cpe:2.3:a:jenkins:script_security:1.30
Jenkins » Script Security » Version: 1.31

cpe:2.3:a:jenkins:script_security:1.31
Jenkins » Script Security » Version: 1.32

cpe:2.3:a:jenkins:script_security:1.32
Jenkins » Script Security » Version: 1.33

cpe:2.3:a:jenkins:script_security:1.33
Jenkins » Script Security » Version: 1.34

cpe:2.3:a:jenkins:script_security:1.34
Jenkins » Script Security » Version: 1.35

cpe:2.3:a:jenkins:script_security:1.35
Jenkins » Script Security » Version: 1.36

cpe:2.3:a:jenkins:script_security:1.36
Jenkins » Script Security » Version: 1.37

cpe:2.3:a:jenkins:script_security:1.37
Jenkins » Script Security » Version: 1.38

cpe:2.3:a:jenkins:script_security:1.38
Jenkins » Script Security » Version: 1.39

cpe:2.3:a:jenkins:script_security:1.39
Jenkins » Script Security » Version: 1.4

cpe:2.3:a:jenkins:script_security:1.4
Jenkins » Script Security » Version: 1.40

cpe:2.3:a:jenkins:script_security:1.40
Jenkins » Script Security » Version: 1.41

cpe:2.3:a:jenkins:script_security:1.41
Jenkins » Script Security » Version: 1.42

cpe:2.3:a:jenkins:script_security:1.42
Jenkins » Script Security » Version: 1.43

cpe:2.3:a:jenkins:script_security:1.43
Jenkins » Script Security » Version: 1.44

cpe:2.3:a:jenkins:script_security:1.44
Jenkins » Script Security » Version: 1.44.1

cpe:2.3:a:jenkins:script_security:1.44.1
Jenkins » Script Security » Version: 1.45

cpe:2.3:a:jenkins:script_security:1.45
Jenkins » Script Security » Version: 1.46

cpe:2.3:a:jenkins:script_security:1.46
Jenkins » Script Security » Version: 1.46.1

cpe:2.3:a:jenkins:script_security:1.46.1
Jenkins » Script Security » Version: 1.47

cpe:2.3:a:jenkins:script_security:1.47
Jenkins » Script Security » Version: 1.48

cpe:2.3:a:jenkins:script_security:1.48
Jenkins » Script Security » Version: 1.49

cpe:2.3:a:jenkins:script_security:1.49
Jenkins » Script Security » Version: 1.5

cpe:2.3:a:jenkins:script_security:1.5
Jenkins » Script Security » Version: 1.50

cpe:2.3:a:jenkins:script_security:1.50
Jenkins » Script Security » Version: 1.51

cpe:2.3:a:jenkins:script_security:1.51
Jenkins » Script Security » Version: 1.52

cpe:2.3:a:jenkins:script_security:1.52
Jenkins » Script Security » Version: 1.53

cpe:2.3:a:jenkins:script_security:1.53
Jenkins » Script Security » Version: 1.54

cpe:2.3:a:jenkins:script_security:1.54
Jenkins » Script Security » Version: 1.54.1

cpe:2.3:a:jenkins:script_security:1.54.1
Jenkins » Script Security » Version: 1.54.2

cpe:2.3:a:jenkins:script_security:1.54.2
Jenkins » Script Security » Version: 1.54.3

cpe:2.3:a:jenkins:script_security:1.54.3
Jenkins » Script Security » Version: 1.54.4

cpe:2.3:a:jenkins:script_security:1.54.4
Jenkins » Script Security » Version: 1.55

cpe:2.3:a:jenkins:script_security:1.55
Jenkins » Script Security » Version: 1.56

cpe:2.3:a:jenkins:script_security:1.56
Jenkins » Script Security » Version: 1.57

cpe:2.3:a:jenkins:script_security:1.57
Jenkins » Script Security » Version: 1.57.1

cpe:2.3:a:jenkins:script_security:1.57.1
Jenkins » Script Security » Version: 1.57.2

cpe:2.3:a:jenkins:script_security:1.57.2
Jenkins » Script Security » Version: 1.57.3

cpe:2.3:a:jenkins:script_security:1.57.3
Jenkins » Script Security » Version: 1.57.4

cpe:2.3:a:jenkins:script_security:1.57.4
Jenkins » Script Security » Version: 1.57.5

cpe:2.3:a:jenkins:script_security:1.57.5
Jenkins » Script Security » Version: 1.57.6

cpe:2.3:a:jenkins:script_security:1.57.6
Jenkins » Script Security » Version: 1.58

cpe:2.3:a:jenkins:script_security:1.58
Jenkins » Script Security » Version: 1.59

cpe:2.3:a:jenkins:script_security:1.59
Jenkins » Script Security » Version: 1.6

cpe:2.3:a:jenkins:script_security:1.6
Jenkins » Script Security » Version: 1.60

cpe:2.3:a:jenkins:script_security:1.60
Jenkins » Script Security » Version: 1.60.1

cpe:2.3:a:jenkins:script_security:1.60.1
Jenkins » Script Security » Version: 1.61

cpe:2.3:a:jenkins:script_security:1.61
Jenkins » Script Security » Version: 1.62

cpe:2.3:a:jenkins:script_security:1.62
Jenkins » Script Security » Version: 1.63

cpe:2.3:a:jenkins:script_security:1.63
Jenkins » Script Security » Version: 1.63.1

cpe:2.3:a:jenkins:script_security:1.63.1
Jenkins » Script Security » Version: 1.64

cpe:2.3:a:jenkins:script_security:1.64
Jenkins » Script Security » Version: 1.65

cpe:2.3:a:jenkins:script_security:1.65
Jenkins » Script Security » Version: 1.66

cpe:2.3:a:jenkins:script_security:1.66
Jenkins » Script Security » Version: 1.66.1

cpe:2.3:a:jenkins:script_security:1.66.1
Jenkins » Script Security » Version: 1.66.2

cpe:2.3:a:jenkins:script_security:1.66.2
Jenkins » Script Security » Version: 1.66.3

cpe:2.3:a:jenkins:script_security:1.66.3
Jenkins » Script Security » Version: 1.66.4

cpe:2.3:a:jenkins:script_security:1.66.4
Jenkins » Script Security » Version: 1.66.5

cpe:2.3:a:jenkins:script_security:1.66.5
Jenkins » Script Security » Version: 1.67

cpe:2.3:a:jenkins:script_security:1.67
Jenkins » Script Security » Version: 1.68

cpe:2.3:a:jenkins:script_security:1.68
Jenkins » Script Security » Version: 1.69

cpe:2.3:a:jenkins:script_security:1.69
Jenkins » Script Security » Version: 1.7

cpe:2.3:a:jenkins:script_security:1.7
Jenkins » Script Security » Version: 1.70

cpe:2.3:a:jenkins:script_security:1.70
Jenkins » Script Security » Version: 1.71

cpe:2.3:a:jenkins:script_security:1.71
Jenkins » Script Security » Version: 1.72

cpe:2.3:a:jenkins:script_security:1.72
Jenkins » Script Security » Version: 1.73

cpe:2.3:a:jenkins:script_security:1.73
Jenkins » Script Security » Version: 1.74

cpe:2.3:a:jenkins:script_security:1.74
Jenkins » Script Security » Version: 1.75

cpe:2.3:a:jenkins:script_security:1.75
Jenkins » Script Security » Version: 1.76

cpe:2.3:a:jenkins:script_security:1.76
Jenkins » Script Security » Version: 1.77

cpe:2.3:a:jenkins:script_security:1.77
Jenkins » Script Security » Version: 1.78

cpe:2.3:a:jenkins:script_security:1.78
Jenkins » Script Security » Version: 1.78.1

cpe:2.3:a:jenkins:script_security:1.78.1
Jenkins » Script Security » Version: 1.8

cpe:2.3:a:jenkins:script_security:1.8
Jenkins » Script Security » Version: 1.9

cpe:2.3:a:jenkins:script_security:1.9
Jenkins » Script Security » Version: 1118.vba21ca2e3286

cpe:2.3:a:jenkins:script_security:1118.vba21ca2e3286
Jenkins » Script Security » Version: 1125.v132f99385e1b_

cpe:2.3:a:jenkins:script_security:1125.v132f99385e1b_
Jenkins » Script Security » Version: 1131.v8b_b_5eda_c328e

cpe:2.3:a:jenkins:script_security:1131.v8b_b_5eda_c328e
Jenkins » Script Security » Version: 1138.v8e727069a_025

cpe:2.3:a:jenkins:script_security:1138.v8e727069a_025
Jenkins » Script Security » Version: 1140.vf967fb_efa_55a_

cpe:2.3:a:jenkins:script_security:1140.vf967fb_efa_55a_
Jenkins » Script Security » Version: 1145.1148.vf6d17a_a_a_eef6

cpe:2.3:a:jenkins:script_security:1145.1148.vf6d17a_a_a_eef6
Jenkins » Script Security » Version: 1145.vb_cf6cf6ed960

cpe:2.3:a:jenkins:script_security:1145.vb_cf6cf6ed960
Jenkins » Script Security » Version: 1146.vdf547f19a_473

cpe:2.3:a:jenkins:script_security:1146.vdf547f19a_473
Jenkins » Script Security » Version: 1158.v7c1b_73a_69a_08

cpe:2.3:a:jenkins:script_security:1158.v7c1b_73a_69a_08
Jenkins » Script Security » Version: 1172.v35f6a_0b_8207e

cpe:2.3:a:jenkins:script_security:1172.v35f6a_0b_8207e
Jenkins » Script Security » Version: 1175.1177.vda_175b_77d144

cpe:2.3:a:jenkins:script_security:1175.1177.vda_175b_77d144
Jenkins » Script Security » Version: 1175.1179.vea_f7532629e1

cpe:2.3:a:jenkins:script_security:1175.1179.vea_f7532629e1
Jenkins » Script Security » Version: 1175.v4b_d517d6db_f0

cpe:2.3:a:jenkins:script_security:1175.v4b_d517d6db_f0
Jenkins » Script Security » Version: 1183.v774b_0b_0a_a_451

cpe:2.3:a:jenkins:script_security:1183.v774b_0b_0a_a_451

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-43401

Products

Pricing

Contact Us