CVE

CVE-2019-1003000

8.8

CVSS

Description

A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java that allows attackers with the ability to provide sandboxed scripts to execute arbitrary code on the Jenkins master JVM.

Attack Vector

Privileges Req.

User Interaction

script security plugin

Updated Sep 22, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~10 seconds

CVE-2019-1003000 Scanner

CVE-2019-1003000 scanner - Remote Code Execution (RCE) vulnerability in Jenkins Script Security Plugin

Used 2.5k times · 5.9k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

CVE history: script security plugin

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →