GitHub Advisoryadvisory · Maven

GHSA-cjr8-5rw4-wh65 Jenkins Splunk Plugin Sandbox Bypass

HIGH Published 2022-05-24 Modified 2023-10-26 Official page ↗
Aliases
CVE-2019-10390
Ecosystem
Maven
Packages
com.splunk.splunkins:splunk-devops
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Reviewed
2023-10-26

Affected packages

• Maven com.splunk.splunkins:splunk-devops: < 1.8.0 → fixed in 1.8.0

Description

Jenkins Splunk Plugin has a form validation HTTP endpoint used to validate a user-submitted Groovy script through compilation, which was not subject to sandbox protection. This allowed attackers with Overall/Read access to execute arbitrary code on the Jenkins controller by applying AST transforming annotations such as `@Grab` to source code elements. The affected HTTP endpoint now applies a safe Groovy compiler configuration preventing the use of unsafe AST transforming annotations.

Related

Alias · CVE (1)

  • CVE-2019-10390 A sandbox bypass vulnerability in Jenkins Splunk Plugin 1.7.4 and earlier allowed attackers with Overall/Read permission to provide a… vulnerability

References