Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c4pg-5ggh-vcpp

Опубликовано: 19 янв. 2024
Источник: github
Github: Прошло ревью
CVSS3: 8.2

Описание

Duplicate Advisory: Sandbox escape in Artemis Java Test Sandbox

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-98hq-4wmw-98w9. This link is maintained to preserve external references.

Original Description

Artemis Java Test Sandbox versions before 1.11.2 are vulnerable to a sandbox escape when an attacker loads untrusted libraries using System.load or System.loadLibrary. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sandboxed code.

Пакеты

Наименование

de.tum.in.ase:artemis-java-test-sandbox

maven
Затронутые версииВерсия исправления

< 1.11.2

1.11.2

8.2 High

CVSS3

Дефекты

CWE-284
CWE-94

8.2 High

CVSS3

Дефекты

CWE-284
CWE-94