Описание
Artemis Java Test Sandbox versions before 1.11.2 are vulnerable to a sandbox escape when an attacker loads untrusted libraries using System.load or System.loadLibrary. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sandboxed code.
Ссылки
- ExploitThird Party Advisory
- ExploitVendor Advisory
- Third Party Advisory
- ExploitThird Party Advisory
- ExploitVendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.11.2 (исключая)
cpe:2.3:a:ls1intum:artemis_java_test_sandbox:*:*:*:*:*:*:*:*
EPSS
Процентиль: 50%
0.00273
Низкий
8.2 High
CVSS3
Дефекты
CWE-284
NVD-CWE-Other
Связанные уязвимости
CVSS3: 8.2
github
почти 3 года назад
Arbitrary code execution in de.tum.in.ase:artemis-java-test-sandbox
EPSS
Процентиль: 50%
0.00273
Низкий
8.2 High
CVSS3
Дефекты
CWE-284
NVD-CWE-Other