/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CVE-2024-34144

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-34144

Severity

9.8

Critical

CVSS V3

Description

A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.

References

  • https://images.chainguard.dev/security/CGA-jvx2-3xj2-cqqv
  • https://github.com/advisories/GHSA-v63g-v339-2673
  • https://images.chainguard.dev/security/CGA-96wx-985x-hr63
  • https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341
  • http://www.openwall.com/lists/oss-security/2024/05/02/3

Affected packages

The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing

Solutions

FedRAMPPCI DSSCMMC 2.0Golden ImagesCVE RemediationPublic Sector

Customers

Customer StoriesChainguard Reviews

Resources

Events & WebinarsSupply Chain Security 101Chainguard CoursesDocumentationTrust CenterChainguard Slack Community

Company

About UsBlogPartnersNewsroomCareersLegal