Description
A sandbox bypass vulnerability in Jenkins ontrack Plugin 3.4 and earlier allowed attackers with control over ontrack DSL definitions to execute arbitrary code on the Jenkins master JVM.
Remediation
References
https://jenkins.io/security/advisory/2019-04-17/#SECURITY-1341
http://www.securityfocus.com/bid/108045
Related Vulnerabilities
CVE-2022-39366 Vulnerability in maven package io.acryl:datahub-client
CVE-2022-25979 Vulnerability in maven package org.webjars.npm:jsuites
CVE-2023-47323 Vulnerability in maven package org.silverpeas.core:silverpeas-core-web
CVE-2023-46731 Vulnerability in maven package org.xwiki.platform:xwiki-platform-administration-ui
CVE-2022-21724 Vulnerability in maven package org.postgresql:postgresql