CVE-2024-23682
Published: 19 January 2024
Summary
CVE-2024-23682 is a high-severity Trust Boundary Violation (CWE-501) vulnerability in Ls1Intum Artemis Java Test Sandbox. Its CVSS base score is 8.2 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked in the top 48.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-0368
Vulnerability details
Artemis Java Test Sandbox versions before 1.8.0 are vulnerable to a sandbox escape when an attacker includes class files in a package that Ares trusts. An attacker can abuse this issue to execute arbitrary Java when a victim executes the…
more
supposedly sandboxed code.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The class loading vulnerability enables sandbox escape in Artemis Java Test Sandbox, allowing arbitrary Java code execution via trusted packages. This facilitates exploitation for client execution (T1203), privilege escalation from sandboxed context (T1068), and defense evasion by bypassing sandbox isolation (T1211).
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Establishes and maintains trust boundaries with external organizations before allowing their systems to interact with organization resources.
Prevents information from crossing trust boundaries without explicit approved authorizations.
Authorizing and reviewing connections helps maintain proper trust boundaries between internal components.
Review of inter-system matching programs identifies and corrects trust-boundary violations before data crosses organizational or policy domains.
By mediating every interface between security domains, the mechanism upholds trust boundaries and blocks violations that would allow untrusted data or commands to cross.
Defining interfaces, controls, and trust responsibilities in agreements helps prevent violations of trust boundaries during data exchanges.
Controlling media movement outside controlled areas maintains separation between internal and external trust boundaries.
Locating systems away from hazards improves isolation and compartmentalization from external physical or environmental threats.