CVE-2019-10393

4.2 mediumEPSS 1.0%

Medium (4.2) in jenkins script security. EPSS 1.0% chance of exploitation in the next 30 days. Fixed in org.jenkins-ci.plugins:script-security 1.63.

A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of method names in method call expressions allowed attackers to execute arbitrary code in sandboxed scripts.

Severity

CVSS 3.1

4.2 medium

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
Published: 2019-09-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

jenkins:script_security

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-9fp8-64xf-w957	Maven	org.jenkins-ci.plugins:script-security	<1.63	1.63

References

http://www.openwall.com/lists/oss-security/2019/09/12/2
https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1538
http://www.openwall.com/lists/oss-security/2019/09/12/2
https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1538

Check your stack JSON