CVE-2019-1003001

CVE-2019-1003001 is a critical sandbox bypass vulnerability affecting Jenkins Pipeline: Groovy Plugin versions 2.61 and earlier, as well as related Red Hat OpenShift Container Platform products. It allows authenticated attackers with Overall/Read permissions to execute arbitrary code on the Jenkins master JVM by providing a specially crafted pipeline script to an HTTP endpoint. This vulnerability carries a CVSS score of 8.8 (High), indicating a low attack complexity and no user interaction required, leading to high impacts on confidentiality, integrity, and availability. Its high EPSS score of 0.937740000 and FAUCET Risk Score of 100/100 highlight its significant exploitability and potential for severe consequences. While not currently on the CISA KEV catalog, exploit intelligence confirms the availability of Metasploit modules and ExploitDB proofs-of-concept (PoCs), demonstrating active development of exploit code. The vulnerability has garnered community discussion and media coverage, including reports of Confluence servers being compromised to install miners and rootkits, underscoring its real-world impact.