CVE-2019-1003041
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 3.4%
exploitation probability
3.4%top 12% of all CVEs
observed exploitation
nono source reports it
A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Plugin 2.64 and earlier allows attackers to invoke arbitrary constructors in sandboxed scripts.
Affected products
Jenkins project · Jenkins Pipeline: Groovy Plugin