{"id":"CVE-2018-1000866","published":"2018-12-10T14:00:00Z","modified":"2024-08-05T12:47:56Z","title":"A sandbox bypass vulnerability exists in Pipeline: Groovy Plugin 2.59 and earlier in…","vendor":null,"product":null,"tier":"tail","description":{"text":"A sandbox bypass vulnerability exists in Pipeline: Groovy Plugin 2.59 and earlier in groovy-sandbox/src/main/java/org/kohsuke/groovy/sandbox/SandboxTransformer.java, groovy-cps/lib/src/main/java/com/cloudbees/groovy/cps/SandboxCpsTransformer.java that allows attackers with Job/Configure permission, or unauthorized attackers with SCM commit privileges and corresponding pipelines based on Jenkinsfiles set up in Jenkins, to execute arbitrary code on the Jenkins master JVM","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01639,"percentile":0.76263,"provenance":"source"},"cwes":[],"references":[{"url":"https://jenkins.io/security/advisory/2018-10-29/#SECURITY-1186","tags":["x_refsource_CONFIRM"]},{"url":"https://access.redhat.com/errata/RHBA-2019:0326","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHBA-2019:0327","tags":["vendor-advisory","x_refsource_REDHAT"]}],"priority":{"score":15.3,"factors":[{"name":"EPSS percentile","points":15.25}]},"affected":[{"ecosystem":"Maven","package":"org.jenkins-ci.plugins.workflow:workflow-cps","vulnerableRanges":["<2.60"],"patched":["2.60"],"from":["GHSA-gqhm-4h93-rrhg"],"provenance":"source"},{"ecosystem":"Maven","package":"org.jenkins-ci.plugins:script-security","vulnerableRanges":["<1.48"],"patched":["1.48"],"from":["GHSA-gqhm-4h93-rrhg"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-3993","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2017-1000107","published":"2017-10-04","fixed":"1.31","kev":false},{"cve":"CVE-2017-1000505","published":"2018-01-25","fixed":"1.37","kev":false,"link":{"from":"CVE-2017-1000505","to":"CVE-2018-1000866","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.jenkins-ci.plugins:script-security","fromFixed":"1.37","toFixed":"1.48","daysApart":319}]}},{"cve":"CVE-2018-1000865","published":"2018-12-10","fixed":"1.48","kev":false},{"cve":"CVE-2018-1000866","published":"2018-12-10","fixed":"1.48","kev":false},{"cve":"CVE-2019-1003000","published":"2019-01-22","fixed":"1.50","kev":false,"link":{"from":"CVE-2018-1000866","to":"CVE-2019-1003000","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.jenkins-ci.plugins:script-security","fromFixed":"1.48","toFixed":"1.50","daysApart":43}]}},{"cve":"CVE-2019-1003001","published":"2019-01-22","fixed":"1.50","kev":false,"link":{"from":"CVE-2018-1000866","to":"CVE-2019-1003001","relation":"successor","confidence":"medium","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.jenkins-ci.plugins:script-security","fromFixed":"1.48","toFixed":"1.50","daysApart":43},{"kind":"similar","provenance":"machine","score":0.45,"basis":"same package + description similarity"}]}},{"cve":"CVE-2019-1003005","published":"2019-02-06","fixed":"1.51","kev":false}],"package":"Maven:org.jenkins-ci.plugins:script-security"}}