CVE-2019-10328

CVE-2019-10328 is a critical vulnerability affecting Jenkins Pipeline Remote Loader Plugin versions 1.4 and earlier. It allowed authenticated attackers to bypass script sandbox protections by leveraging a custom whitelist, enabling the invocation of arbitrary methods. With a CVSS score of 9.9, this vulnerability presents a high risk of complete compromise (confidentiality, integrity, availability) with low attack complexity and no user interaction required. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness among security researchers.