Cyber Resilience

CVE-2022-43403

Critical

Published: 19 October 2022

Published
19 October 2022
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS Score 0.0030 53.9th percentile
Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2022-43403 is a critical-severity an unspecified weakness vulnerability in Jenkins Script Security. Its CVSS base score is 9.9 (Critical).

Operationally, ranked in the top 46.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

A sandbox bypass vulnerability involving casting an array-like value to an array type in Jenkins Script Security Plugin 1183.v774b_0b_0a_a_451 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute…

more

arbitrary code in the context of the Jenkins controller JVM.

CWE(s)
NVD-CWE-noinfo

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

jenkins
script security
≤ 1183.v774b_0b_0a_a_451

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References