CVE-2019-10400: Improper Input Validation

September 12, 2019 (updated October 9, 2019)

A sandbox bypass vulnerability in Jenkins Script Security Plugin related to the handling of subexpressions in increment and decrement expressions not involving actual assignment allows attackers to execute arbitrary code in sandboxed scripts.

References

jenkins.io/security/advisory/2019-09-12/
nvd.nist.gov/vuln/detail/CVE-2019-10400

Code Behaviors & Features

Detect and mitigate CVE-2019-10400 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →