CVE-2019-1003034

moderate-risk
Published 2019-03-08

A sandbox bypass vulnerability exists in Jenkins Job DSL Plugin 1.71 and earlier in job-dsl-core/src/main/groovy/javaposse/jobdsl/dsl/AbstractDslScriptLoader.groovy, job-dsl-plugin/build.gradle, job-dsl-plugin/src/main/groovy/javaposse/jobdsl/plugin/JobDslWhitelist.groovy, job-dsl-plugin/src/main/groovy/javaposse/jobdsl/plugin/SandboxDslScriptLoader.groovy that allows attackers with control over Job DSL definitions to execute arbitrary code on the Jenkins master JVM.

Do I need to act?

~
1.8% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.9/10 Critical
NETWORK / LOW complexity

Affected Products (2)

Job Dsl

Affected Vendors

Redhat Jenkins

References (6)

Third Party Advisory http://www.securityfocus.com/bid/107476
Third Party Advisory https://access.redhat.com/errata/RHSA-2019:0739
Vendor Advisory https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1342
Third Party Advisory http://www.securityfocus.com/bid/107476
Third Party Advisory https://access.redhat.com/errata/RHSA-2019:0739
Vendor Advisory https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1342
45
/ 100
moderate-risk
Severity 33/34 · Critical
Exploitability 5/34 · Minimal
Exposure 7/34 · Low