CVE-2019-1003000 PoC — Jenkins Script Security Plugin 安全漏洞

Source

https://github.com/slowmistio/CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins

Associated Vulnerability

Title: Jenkins Script Security Plugin 安全漏洞 (CVE-2019-1003000)
Description:A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java that allows attackers with the ability to provide sandboxed scripts to execute arbitrary code on the Jenkins master JVM.

Description

Python CVE-2019-1003000 and CVE-2018-1999002 Pre-Auth RCE Jenkins

Readme

# CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins
CVE-2019-1003000 and CVE-2018-1999002 Pre-Auth RCE Jenkins

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →