CVE-2019-10431
Improper Control of Generation of Code in Jenkins Script Security Plugin
CVE-2019-10431 is a critical vulnerability (CVSS 9.9) in Jenkins Script Security, published October 1, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.75%, the 86th percentile. Fixed in org.jenkins-ci.plugins:script-security 1.65.
- Severity
- 9.9 CriticalCVSS 3.1, NVD
- Exploit chance
- 2.75%EPSS, 86th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.65org.jenkins-ci.plugins:script-security +4 more
Description
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.64 and earlier related to the handling of default parameter expressions in constructors allowed attackers to execute arbitrary code in sandboxed scripts.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.jenkins-ci.plugins:script-securityMaven | through 1.64 | 1.65 |
org.jenkins-ci.plugins:script-securityMaven | before 1.65, plus listed versions 1.01.0-beta-11.0-beta-21.0-beta-31.0-beta-4 Show 45 moreShow less1.0-beta-51.0-beta-61.11.101.111.121.131.141.151.161.171.181.18.11.191.21.201.211.221.231.241.251.261.271.281.291.29.11.31.301.311.331.341.351.361.371.381.391.41.401.411.421.431.441.44.11.451.46 | 1.65 |
jenkins-2-pluginsRed Hat:openshift:3.11::el7 From an advisory covering 6 CVEs | before 0:3.11.1575261255-1.el7 | 0:3.11.1575261255-1.el7 |
jenkins-2-pluginsRed Hat:openshift:4.1::el7 From an advisory covering 6 CVEs | before 0:4.1.1574872364-1.el7 | 0:4.1.1574872364-1.el7 |
jenkins-2-pluginsRed Hat:openshift:4.2::el7 From an advisory covering 6 CVEs | before 0:4.2.1574873592-1.el7 | 0:4.2.1574873592-1.el7 |
What each source reports
NVD Score used
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.64 and earlier related to the handling of default parameter expressions in constructors allowed attackers to execute arbitrary code in sandboxed scripts.
- Record
CVE-2019-10431- CVSS 3.1
- 9.9 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE ListNo score
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.64 and earlier related to the handling of default parameter expressions in constructors allowed attackers to execute arbitrary code in sandboxed scripts.
- Record
CVE-2019-10431- Updated
- 2026-11-02
EUVDEUVD-2022-2891No score
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.64 and earlier related to the handling of default parameter expressions in constructors allowed attackers to execute arbitrary code in sandboxed scripts.
- Record
EUVD-2022-2891- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-72gx-qq2m-6xr2
Improper Control of Generation of Code in Jenkins Script Security Plugin
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.64 and earlier related to the handling of default parameter expressions in constructors allowed attackers to execute arbitrary code in sandboxed scripts.
- Record
GHSA-72gx-qq2m-6xr2- CVSS 3.1
- 9.9 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-94
- Updated
- 2026-11-02
OSV
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.64 and earlier related to the handling of default parameter expressions in constructors allowed attackers to execute arbitrary code in sandboxed scripts.
- Record
CVE-2019-10431- CVSS 3.1
- 9.9 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVGHSA-72gx-qq2m-6xr2
Improper Control of Generation of Code in Jenkins Script Security Plugin
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.64 and earlier related to the handling of default parameter expressions in constructors allowed attackers to execute arbitrary code in sandboxed scripts.
- Record
GHSA-72gx-qq2m-6xr2- CVSS 3.1
- 9.9 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-94
- Updated
- 2026-11-02
OSVRHSA-2019:4055
Red Hat Security Advisory: OpenShift Container Platform 3.11 jenkins-2-plugins security update
- Record
RHSA-2019:4055- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2019:4089
Red Hat Security Advisory: OpenShift Container Platform 4.1 jenkins-2-plugins security update
- Record
RHSA-2019:4089- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2019:4097
Red Hat Security Advisory: OpenShift Container Platform 4.2 jenkins-2-plugins security update
- Record
RHSA-2019:4097- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
jenkins.io/security/advisory/2019-10-01
openwall.com/lists/oss-security/2019/10/01/2
access.redhat.com/errata/RHSA-2019:4097
nvd.nist.gov/vuln/detail/CVE-2019-10431
Show 32 moreShow less
github.com/jenkinsci/script-security-plugin/commit/415b6e2f3fa0c2e4bd2f9c4a589a9e1fc9cbac8b
bugzilla.redhat.com/show_bug.cgi?id=1764387
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_4055.json
cve.org/CVERecord?id=CVE-2019-10393
Left out here: 36 versions. The JSON record has them.