CVE-2020-2134

描述

Sandbox protection in Script Security Plugin 1.70 and earlier can be circumvented through: - Crafted constructor calls and bodies (due to an incomplete fix of [SECURITY-582](https://www.jenkins.io/security/advisory/2017-08-07/#super-constructor-calls)) - Crafted method calls on objects that implement `GroovyInterceptable` This allows attackers able to specify and run sandboxed scripts to execute arbitrary code in the context of the Jenkins controller JVM. Script Security Plugin 1.71 has additional restrictions and sanity checks to ensure that super constructors cannot be constructed without being intercepted by the sandbox. In addition, it also intercepts method calls on objects that implement `GroovyInterceptable` as calls to `GroovyObject#invokeMethod(String, Object)`, which is on the list of dangerous signatures and should not be approved for use in the sandbox.

如何修補 CVE-2020-2134

要修補 CVE-2020-2134,請將受影響套件升級到下列已修補版本。

• —升級至 1.7.1 或更新版本

CVE-2020-2134 正在被利用嗎?

低 — EPSS 為 1.0%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 1.7.1

CVSS 分數

參考連結(5)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2020-2134
• PATCHgithub.com/jenkinsci/script-security-plugin
• WEBwww.openwall.com/lists/oss-security/2020/03/09/1
• WEBgithub.com/jenkinsci/script-security-plugin/commit/5b1969e0bdf5cde04a165b847144756b28495788