CVE-2023-24422

Maven/org.jenkins-ci.plugins:script-security CVE-2023-24422: high 8.8

Sandbox bypass in Jenkins Script Security Plugin

Action: Upgrade org.jenkins-ci.plugins:script-security to 1229.v4880b or later.

Affected

Fixed versions

Sources

• osv: GHSA-76qj-9gwh-pvv3
• https://nvd.nist.gov/vuln/detail/CVE-2023-24422
• https://github.com/jenkinsci/script-security-plugin/commit/4880bbe905a6783d80150c8b881d0127430d4a73
• https://github.com/jenkinsci/script-security-plugin
• https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-3016

CVE-2023-24422 · published 2023-01-26T21:30:19Z · modified 2024-02-16T08:24:17.096385Z · JSON