CVE-2017-1000107

8.8 highEPSS 1.2%

Script Security Plugin did not apply sandboxing restrictions to constructor invocations via positional arguments list, super constructor invocations, method references, and type coercion expressions. This could be used to invoke arbitrary constructors and methods, bypassing sandbox protection.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
Published: 2017-10-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

jenkins:script_security

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-h7rx-r733-7x7r	Maven	org.jenkins-ci.plugins:script-security	<1.31	1.31

References

https://jenkins.io/security/advisory/2017-08-07/
https://jenkins.io/security/advisory/2017-08-07/

Check your stack JSON