{"cvss":0.0,"datePublished":"2020-01-31T00:00:00Z","dateUpdated":"2020-01-31T00:00:00Z","description":"A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java that allows attackers with the ability to provide sandboxed scripts to execute arbitrary code on the Jenkins master JVM.","dueDate":"","id":"CVE-2019-1003000","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Script Security Plugin","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Script Security Plugin Sandboxed Script Execution Vulnerability","vendor":"Jenkins"}