CVE-2024-23683

Katalog CVE

CVSS 8.2 · High EPSS 0,36%

Kerentanan Improper Isolation or Compartmentalization pada ls1intum artemis java test sandbox. Skor CVSS 3.1 8.2 (High) menurut NVD.

Deskripsi (NVD)

Artemis Java Test Sandbox versions less than 1.7.6 are vulnerable to a sandbox escape when an attacker crafts a special subclass of InvocationTargetException. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sandboxed code.

Rincian

Terbit di NVD

19 Januari 2024

Terakhir diubah

14 Juli 2026

Status NVD

Modified

CVSS 3.1

8.2 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-653: Improper Isolation or Compartmentalization

EPSS (30 hari)

0,36% peluang dieksploitasi; lebih tinggi dari 27,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/ls1intum/Ares/security/advisories/GHSA-883x-6fch-6wjx exploit · advisory vendor
• https://github.com/ls1intum/Ares/commit/af4f28a56e2fe600d8750b3b415352a0a3217392 patch
• https://github.com/advisories/GHSA-883x-6fch-6wjx exploit · advisory pihak ketiga
• https://vulncheck.com/advisories/vc-advisory-GHSA-883x-6fch-6wjx advisory pihak ketiga
• https://github.com/ls1intum/Ares/issues/15#issuecomment-996449371 issue tracking
• https://github.com/ls1intum/Ares/releases/tag/1.7.6 release notes