Описание
Duplicate Advisory: Sandbox escape in Artemis Java Test Sandbox
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-98hq-4wmw-98w9. This link is maintained to preserve external references.
Original Description
Artemis Java Test Sandbox versions before 1.11.2 are vulnerable to a sandbox escape when an attacker loads untrusted libraries using System.load or System.loadLibrary. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sandboxed code.
Пакеты
Наименование
de.tum.in.ase:artemis-java-test-sandbox
maven
Затронутые версииВерсия исправления
< 1.11.2
1.11.2
8.2 High
CVSS3
Дефекты
CWE-284
CWE-94
8.2 High
CVSS3
Дефекты
CWE-284
CWE-94