Lucene search
PRIOn knowledge basePRION:CVE-2022-43404HistoryOct 19, 2022 - 4:15 p.m.
Security feature bypass
2022-10-1916:15:00
PRIOn knowledge base
www.prio-n.com
11
vulnerability
sandbox bypass
jenkins
script security
arbitrary code
nvd
A sandbox bypass vulnerability involving crafted constructor bodies and calls to sandbox-generated synthetic constructors in Jenkins Script Security Plugin 1183.v774b_0b_0a_a_451 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.
| CPE | Name | Operator | Version |
|---|---|---|---|
| script_security | eq | <= 1183.v774b0b0aa451 |
Related
alpinelinux
alpinelinux
CVE-2022-43404
2022-10-19 16:15:10
osv
osv
CVE-2022-43404
2022-10-19 16:15:10
redhatcve
redhatcve
CVE-2022-43404
2022-10-20 06:47:24
nvd
nvd
CVE-2022-43404
2022-10-19 16:15:10
veracode
veracode
Sandbox Bypass
2022-10-20 14:04:20
cvelist
cvelist
CVE-2022-43404
2022-10-19 00:00:00
cve
cve
CVE-2022-43404
2022-10-19 16:15:10
github
github
redhat
redhat
nessus
nessus
RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2023:3198)
2024-04-28 00:00:00
RHEL 8 : OpenShift Container Platform 4.10.51 (RHSA-2023:0560)
2024-04-28 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00