CVE-2019-16538: High severity jenkins script security vulnerability
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.67 and earlier related to the handling of default parameter expressions in closures allowed attackers to execute arbitrary code in sandboxed scripts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-16538?
CVE-2019-16538 is classified as a high-severity vulnerability due to its ability to allow execution of arbitrary code in sandboxed scripts.
How do I fix CVE-2019-16538?
To fix CVE-2019-16538, upgrade the Jenkins Script Security Plugin to version 1.68 or later.
What type of vulnerability is CVE-2019-16538?
CVE-2019-16538 is a sandbox bypass vulnerability that affects the handling of default parameter expressions in closures.
Which versions of Jenkins are affected by CVE-2019-16538?
All versions of Jenkins Script Security Plugin prior to 1.68 are affected by CVE-2019-16538.
Can CVE-2019-16538 be exploited remotely?
Yes, CVE-2019-16538 can be exploited remotely by attackers with access to sandboxed scripts.