CVE-2019-10399: Medium severity jenkins script security vulnerability
Published Sep 12, 2019
·Updated
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of property names in property expressions in increment and decrement expressions allowed attackers to execute arbitrary code in sandboxed scripts.
Affected Software
2 affected componentsFixes available
maven/org.jenkins-ci.plugins:script-security<=1.62
1.63
Jenkins Script Security Jenkins<=1.62
Event History
Sep 12, 2019
CVE Published
via MITRE·01:55 PM
Data Sourced
via MITRE·01:55 PM
Description
May 24, 2022
Advisory Published
04:55 PM
Frequently Asked Questions
1
What is the severity of CVE-2019-10399?
CVE-2019-10399 has a critical severity rating due to its potential to allow arbitrary code execution.
2
How do I fix CVE-2019-10399?
To fix CVE-2019-10399, update the Jenkins Script Security Plugin to version 1.63 or later.
3
What software is affected by CVE-2019-10399?
CVE-2019-10399 affects Jenkins Script Security Plugin versions 1.62 and earlier.
4
What type of vulnerability is CVE-2019-10399?
CVE-2019-10399 is described as a sandbox bypass vulnerability.
5
Can CVE-2019-10399 lead to serious security risks?
Yes, CVE-2019-10399 can lead to execution of arbitrary code, presenting serious security risks.