CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-24422

A sandbox bypass vulnerability involving map constructors in Jenkins Script Security Plugin 1228.vd93135a_2fb_25 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 1.6%

CVSS Severity

CVSS v3 Score 8.8

References

Products affected by CVE-2023-24422

Jenkins » Script Security » Version: 1.0

cpe:2.3:a:jenkins:script_security:1.0
Jenkins » Script Security » Version: 1.1

cpe:2.3:a:jenkins:script_security:1.1
Jenkins » Script Security » Version: 1.10

cpe:2.3:a:jenkins:script_security:1.10
Jenkins » Script Security » Version: 1.11

cpe:2.3:a:jenkins:script_security:1.11
Jenkins » Script Security » Version: 1.12

cpe:2.3:a:jenkins:script_security:1.12
Jenkins » Script Security » Version: 1.13

cpe:2.3:a:jenkins:script_security:1.13
Jenkins » Script Security » Version: 1.14

cpe:2.3:a:jenkins:script_security:1.14
Jenkins » Script Security » Version: 1.15

cpe:2.3:a:jenkins:script_security:1.15
Jenkins » Script Security » Version: 1.16

cpe:2.3:a:jenkins:script_security:1.16
Jenkins » Script Security » Version: 1.17

cpe:2.3:a:jenkins:script_security:1.17
Jenkins » Script Security » Version: 1.18

cpe:2.3:a:jenkins:script_security:1.18
Jenkins » Script Security » Version: 1.18.1

cpe:2.3:a:jenkins:script_security:1.18.1
Jenkins » Script Security » Version: 1.19

cpe:2.3:a:jenkins:script_security:1.19
Jenkins » Script Security » Version: 1.2

cpe:2.3:a:jenkins:script_security:1.2
Jenkins » Script Security » Version: 1.20

cpe:2.3:a:jenkins:script_security:1.20
Jenkins » Script Security » Version: 1.21

cpe:2.3:a:jenkins:script_security:1.21
Jenkins » Script Security » Version: 1.22

cpe:2.3:a:jenkins:script_security:1.22
Jenkins » Script Security » Version: 1.23

cpe:2.3:a:jenkins:script_security:1.23
Jenkins » Script Security » Version: 1.24

cpe:2.3:a:jenkins:script_security:1.24
Jenkins » Script Security » Version: 1.25

cpe:2.3:a:jenkins:script_security:1.25
Jenkins » Script Security » Version: 1.26

cpe:2.3:a:jenkins:script_security:1.26
Jenkins » Script Security » Version: 1.27

cpe:2.3:a:jenkins:script_security:1.27
Jenkins » Script Security » Version: 1.28

cpe:2.3:a:jenkins:script_security:1.28
Jenkins » Script Security » Version: 1.29

cpe:2.3:a:jenkins:script_security:1.29
Jenkins » Script Security » Version: 1.29.1

cpe:2.3:a:jenkins:script_security:1.29.1
Jenkins » Script Security » Version: 1.3

cpe:2.3:a:jenkins:script_security:1.3
Jenkins » Script Security » Version: 1.30

cpe:2.3:a:jenkins:script_security:1.30
Jenkins » Script Security » Version: 1.31

cpe:2.3:a:jenkins:script_security:1.31
Jenkins » Script Security » Version: 1.32

cpe:2.3:a:jenkins:script_security:1.32
Jenkins » Script Security » Version: 1.33

cpe:2.3:a:jenkins:script_security:1.33
Jenkins » Script Security » Version: 1.34

cpe:2.3:a:jenkins:script_security:1.34
Jenkins » Script Security » Version: 1.35

cpe:2.3:a:jenkins:script_security:1.35
Jenkins » Script Security » Version: 1.36

cpe:2.3:a:jenkins:script_security:1.36
Jenkins » Script Security » Version: 1.37

cpe:2.3:a:jenkins:script_security:1.37
Jenkins » Script Security » Version: 1.38

cpe:2.3:a:jenkins:script_security:1.38
Jenkins » Script Security » Version: 1.39

cpe:2.3:a:jenkins:script_security:1.39
Jenkins » Script Security » Version: 1.4

cpe:2.3:a:jenkins:script_security:1.4
Jenkins » Script Security » Version: 1.40

cpe:2.3:a:jenkins:script_security:1.40
Jenkins » Script Security » Version: 1.41

cpe:2.3:a:jenkins:script_security:1.41
Jenkins » Script Security » Version: 1.42

cpe:2.3:a:jenkins:script_security:1.42
Jenkins » Script Security » Version: 1.43

cpe:2.3:a:jenkins:script_security:1.43
Jenkins » Script Security » Version: 1.44

cpe:2.3:a:jenkins:script_security:1.44
Jenkins » Script Security » Version: 1.44.1

cpe:2.3:a:jenkins:script_security:1.44.1
Jenkins » Script Security » Version: 1.45

cpe:2.3:a:jenkins:script_security:1.45
Jenkins » Script Security » Version: 1.46

cpe:2.3:a:jenkins:script_security:1.46
Jenkins » Script Security » Version: 1.46.1

cpe:2.3:a:jenkins:script_security:1.46.1
Jenkins » Script Security » Version: 1.47

cpe:2.3:a:jenkins:script_security:1.47
Jenkins » Script Security » Version: 1.48

cpe:2.3:a:jenkins:script_security:1.48
Jenkins » Script Security » Version: 1.49

cpe:2.3:a:jenkins:script_security:1.49
Jenkins » Script Security » Version: 1.5

cpe:2.3:a:jenkins:script_security:1.5
Jenkins » Script Security » Version: 1.50

cpe:2.3:a:jenkins:script_security:1.50
Jenkins » Script Security » Version: 1.51

cpe:2.3:a:jenkins:script_security:1.51
Jenkins » Script Security » Version: 1.52

cpe:2.3:a:jenkins:script_security:1.52
Jenkins » Script Security » Version: 1.53

cpe:2.3:a:jenkins:script_security:1.53
Jenkins » Script Security » Version: 1.54

cpe:2.3:a:jenkins:script_security:1.54
Jenkins » Script Security » Version: 1.54.1

cpe:2.3:a:jenkins:script_security:1.54.1
Jenkins » Script Security » Version: 1.54.2

cpe:2.3:a:jenkins:script_security:1.54.2
Jenkins » Script Security » Version: 1.54.3

cpe:2.3:a:jenkins:script_security:1.54.3
Jenkins » Script Security » Version: 1.54.4

cpe:2.3:a:jenkins:script_security:1.54.4
Jenkins » Script Security » Version: 1.55

cpe:2.3:a:jenkins:script_security:1.55
Jenkins » Script Security » Version: 1.56

cpe:2.3:a:jenkins:script_security:1.56
Jenkins » Script Security » Version: 1.57

cpe:2.3:a:jenkins:script_security:1.57
Jenkins » Script Security » Version: 1.57.1

cpe:2.3:a:jenkins:script_security:1.57.1
Jenkins » Script Security » Version: 1.57.2

cpe:2.3:a:jenkins:script_security:1.57.2
Jenkins » Script Security » Version: 1.57.3

cpe:2.3:a:jenkins:script_security:1.57.3
Jenkins » Script Security » Version: 1.57.4

cpe:2.3:a:jenkins:script_security:1.57.4
Jenkins » Script Security » Version: 1.57.5

cpe:2.3:a:jenkins:script_security:1.57.5
Jenkins » Script Security » Version: 1.57.6

cpe:2.3:a:jenkins:script_security:1.57.6
Jenkins » Script Security » Version: 1.58

cpe:2.3:a:jenkins:script_security:1.58
Jenkins » Script Security » Version: 1.59

cpe:2.3:a:jenkins:script_security:1.59
Jenkins » Script Security » Version: 1.6

cpe:2.3:a:jenkins:script_security:1.6
Jenkins » Script Security » Version: 1.60

cpe:2.3:a:jenkins:script_security:1.60
Jenkins » Script Security » Version: 1.60.1

cpe:2.3:a:jenkins:script_security:1.60.1
Jenkins » Script Security » Version: 1.61

cpe:2.3:a:jenkins:script_security:1.61
Jenkins » Script Security » Version: 1.62

cpe:2.3:a:jenkins:script_security:1.62
Jenkins » Script Security » Version: 1.63

cpe:2.3:a:jenkins:script_security:1.63
Jenkins » Script Security » Version: 1.63.1

cpe:2.3:a:jenkins:script_security:1.63.1
Jenkins » Script Security » Version: 1.64

cpe:2.3:a:jenkins:script_security:1.64
Jenkins » Script Security » Version: 1.65

cpe:2.3:a:jenkins:script_security:1.65
Jenkins » Script Security » Version: 1.66

cpe:2.3:a:jenkins:script_security:1.66
Jenkins » Script Security » Version: 1.66.1

cpe:2.3:a:jenkins:script_security:1.66.1
Jenkins » Script Security » Version: 1.66.2

cpe:2.3:a:jenkins:script_security:1.66.2
Jenkins » Script Security » Version: 1.66.3

cpe:2.3:a:jenkins:script_security:1.66.3
Jenkins » Script Security » Version: 1.66.4

cpe:2.3:a:jenkins:script_security:1.66.4
Jenkins » Script Security » Version: 1.66.5

cpe:2.3:a:jenkins:script_security:1.66.5
Jenkins » Script Security » Version: 1.67

cpe:2.3:a:jenkins:script_security:1.67
Jenkins » Script Security » Version: 1.68

cpe:2.3:a:jenkins:script_security:1.68
Jenkins » Script Security » Version: 1.69

cpe:2.3:a:jenkins:script_security:1.69
Jenkins » Script Security » Version: 1.7

cpe:2.3:a:jenkins:script_security:1.7
Jenkins » Script Security » Version: 1.70

cpe:2.3:a:jenkins:script_security:1.70
Jenkins » Script Security » Version: 1.71

cpe:2.3:a:jenkins:script_security:1.71
Jenkins » Script Security » Version: 1.72

cpe:2.3:a:jenkins:script_security:1.72
Jenkins » Script Security » Version: 1.73

cpe:2.3:a:jenkins:script_security:1.73
Jenkins » Script Security » Version: 1.74

cpe:2.3:a:jenkins:script_security:1.74
Jenkins » Script Security » Version: 1.75

cpe:2.3:a:jenkins:script_security:1.75
Jenkins » Script Security » Version: 1.76

cpe:2.3:a:jenkins:script_security:1.76
Jenkins » Script Security » Version: 1.77

cpe:2.3:a:jenkins:script_security:1.77
Jenkins » Script Security » Version: 1.78

cpe:2.3:a:jenkins:script_security:1.78
Jenkins » Script Security » Version: 1.78.1

cpe:2.3:a:jenkins:script_security:1.78.1
Jenkins » Script Security » Version: 1.8

cpe:2.3:a:jenkins:script_security:1.8
Jenkins » Script Security » Version: 1.9

cpe:2.3:a:jenkins:script_security:1.9
Jenkins » Script Security » Version: 1118.vba21ca2e3286

cpe:2.3:a:jenkins:script_security:1118.vba21ca2e3286
Jenkins » Script Security » Version: 1125.v132f99385e1b_

cpe:2.3:a:jenkins:script_security:1125.v132f99385e1b_
Jenkins » Script Security » Version: 1131.v8b_b_5eda_c328e

cpe:2.3:a:jenkins:script_security:1131.v8b_b_5eda_c328e
Jenkins » Script Security » Version: 1138.v8e727069a_025

cpe:2.3:a:jenkins:script_security:1138.v8e727069a_025
Jenkins » Script Security » Version: 1140.vf967fb_efa_55a_

cpe:2.3:a:jenkins:script_security:1140.vf967fb_efa_55a_
Jenkins » Script Security » Version: 1145.1148.vf6d17a_a_a_eef6

cpe:2.3:a:jenkins:script_security:1145.1148.vf6d17a_a_a_eef6
Jenkins » Script Security » Version: 1145.vb_cf6cf6ed960

cpe:2.3:a:jenkins:script_security:1145.vb_cf6cf6ed960
Jenkins » Script Security » Version: 1146.vdf547f19a_473

cpe:2.3:a:jenkins:script_security:1146.vdf547f19a_473
Jenkins » Script Security » Version: 1158.v7c1b_73a_69a_08

cpe:2.3:a:jenkins:script_security:1158.v7c1b_73a_69a_08
Jenkins » Script Security » Version: 1172.v35f6a_0b_8207e

cpe:2.3:a:jenkins:script_security:1172.v35f6a_0b_8207e
Jenkins » Script Security » Version: 1175.1177.vda_175b_77d144

cpe:2.3:a:jenkins:script_security:1175.1177.vda_175b_77d144
Jenkins » Script Security » Version: 1175.1179.vea_f7532629e1

cpe:2.3:a:jenkins:script_security:1175.1179.vea_f7532629e1
Jenkins » Script Security » Version: 1175.v4b_d517d6db_f0

cpe:2.3:a:jenkins:script_security:1175.v4b_d517d6db_f0
Jenkins » Script Security » Version: 1183.v774b_0b_0a_a_451

cpe:2.3:a:jenkins:script_security:1183.v774b_0b_0a_a_451
Jenkins » Script Security » Version: 1184.v85d16b_d851b_3

cpe:2.3:a:jenkins:script_security:1184.v85d16b_d851b_3
Jenkins » Script Security » Version: 1189.vb_a_b_7c8fd5fde

cpe:2.3:a:jenkins:script_security:1189.vb_a_b_7c8fd5fde
Jenkins » Script Security » Version: 1209.v50b_005db_19db

cpe:2.3:a:jenkins:script_security:1209.v50b_005db_19db
Jenkins » Script Security » Version: 1218.v39ca_7f7ed0a_c

cpe:2.3:a:jenkins:script_security:1218.v39ca_7f7ed0a_c
Jenkins » Script Security » Version: 1228.vd93135a_2fb_25

cpe:2.3:a:jenkins:script_security:1228.vd93135a_2fb_25

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-24422

Products

Pricing

Contact Us