Cyber Resilience

CVE-2024-23682

HighPublic PoC

Published: 19 January 2024

Published
19 January 2024
Modified
28 November 2025
KEV Added
Patch
CVSS Score v3.1 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
EPSS Score 0.0028 51.8th percentile
Risk Priority 17 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-23682 is a high-severity Trust Boundary Violation (CWE-501) vulnerability in Ls1Intum Artemis Java Test Sandbox. Its CVSS base score is 8.2 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked in the top 48.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability details

Artemis Java Test Sandbox versions before 1.8.0 are vulnerable to a sandbox escape when an attacker includes class files in a package that Ares trusts. An attacker can abuse this issue to execute arbitrary Java when a victim executes the…

more

supposedly sandboxed code.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1203 Exploitation for Client Execution Execution
Adversaries may exploit software vulnerabilities in client applications to execute code.
T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
T1211 Exploitation for Stealth Stealth
Adversaries may exploit vulnerabilities to evade detection by hiding activity, suppressing logging, or operating within trusted or unmonitored components.
Why these techniques?

The class loading vulnerability enables sandbox escape in Artemis Java Test Sandbox, allowing arbitrary Java code execution via trusted packages. This facilitates exploitation for client execution (T1203), privilege escalation from sandboxed context (T1068), and defense evasion by bypassing sandbox isolation (T1211).

Affected Assets

ls1intum
artemis java test sandbox
≤ 1.8.0

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

addresses: CWE-501 CWE-653

Establishes and maintains trust boundaries with external organizations before allowing their systems to interact with organization resources.

addresses: CWE-501 CWE-653

Prevents information from crossing trust boundaries without explicit approved authorizations.

addresses: CWE-501 CWE-653

Authorizing and reviewing connections helps maintain proper trust boundaries between internal components.

addresses: CWE-501 CWE-653

Review of inter-system matching programs identifies and corrects trust-boundary violations before data crosses organizational or policy domains.

addresses: CWE-501 CWE-653

By mediating every interface between security domains, the mechanism upholds trust boundaries and blocks violations that would allow untrusted data or commands to cross.

addresses: CWE-501

Defining interfaces, controls, and trust responsibilities in agreements helps prevent violations of trust boundaries during data exchanges.

addresses: CWE-501

Controlling media movement outside controlled areas maintains separation between internal and external trust boundaries.

addresses: CWE-653

Locating systems away from hazards improves isolation and compartmentalization from external physical or environmental threats.

References