CVE-2019-10306
CVE-2019-10306
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 2.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
18 Apr 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A sandbox bypass vulnerability in Jenkins ontrack Plugin 3.4 and earlier allowed attackers with control over ontrack DSL definitions to execute arbitrary code on the Jenkins master JVM.
Affected products
Jenkins project · Jenkins ontrack PluginWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →