EDB-48904

PoC

Jenkins 2.63 - Sandbox bypass in pipeline: Groovy plug-in

view exploit source exploit_dbtype webappsauthor Daniel Morrispublished 2020-10-19catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2019-1003030UScritical9.9OT criticalKEV
A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShell.java that allo…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan