cve/2019/CVE-2019-1003002.md

### [CVE-2019-1003002](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1003002)
![](https://img.shields.io/static/v1?label=Product&message=Pipeline%3A%20Declarative%20Plugin&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%201.3.3%20and%20earlier%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

A sandbox bypass vulnerability exists in Pipeline: Declarative Plugin 1.3.3 and earlier in pipeline-model-definition/src/main/groovy/org/jenkinsci/plugins/pipeline/modeldefinition/parser/Converter.groovy that allows attackers with Overall/Read permission to provide a pipeline script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.

### POC

#### Reference
- http://packetstormsecurity.com/files/152132/Jenkins-ACL-Bypass-Metaprogramming-Remote-Code-Execution.html
- https://www.exploit-db.com/exploits/46572/

#### Github
- https://github.com/20142995/sectool
- https://github.com/ARPSyndicate/cvemon
- https://github.com/BLACKHAT-SSG/Pwn_Jenkins
- https://github.com/CVEDB/PoC-List
- https://github.com/CVEDB/awesome-cve-repo
- https://github.com/CVEDB/top
- https://github.com/GhostTroops/TOP
- https://github.com/JERRY123S/all-poc
- https://github.com/PwnAwan/Pwn_Jenkins
- https://github.com/Rajchowdhury420/Secure-or-Break-Jenkins
- https://github.com/adamyordan/cve-2019-1003000-jenkins-rce-poc
- https://github.com/anquanscan/sec-tools
- https://github.com/cyberanand1337x/bug-bounty-2022
- https://github.com/gquere/pwn_jenkins
- https://github.com/hktalent/TOP
- https://github.com/jbmihoub/all-poc
- https://github.com/retr0-13/pwn_jenkins
- https://github.com/trganda/starrlist
- https://github.com/weeka10/-hktalent-TOP