Exploit for Jenkins_CVE-2019-1003000

kitploit · 2026-08-26

Description

Remote code execution in Jenkins Script-Security Pipeline Plugin (CVE-2019-1003000).

Entry point

Parametervalue · query param

PathsecurityRealm/user/admin/descriptorByName/org.jenkinsci.plugins.workflow.cps.CpsFlowDefinition/checkScriptCompile

CVE-2019-1003000/2019-1003001/2019-1003002 family sandbox bypass leading to remote code execution via Groovy @Grab payloads

Affected Jenkins Script Security versions

Jenkins Script Security≤ 1.49

All known vulnerabilities by product

Jenkins Script Security Plugin

CVSS 8.8 for CVE-2019-1003000

8.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

CVE-2019-1003000

Exploit Details

Modified:2026-08-26 21:30

Last Seen:2026-08-26 22:18

Reporter:KitPloit

Tags

Script-Security Pipeline PluginRemote code executionJenkinsCVE-2019-1003000

Other exploits for CVE-2019-1003000

cve-2019-1003000-jenkins-rce-poc

2026-08-27 KitPloitKITPLOIT

cve-2019-1003000-jenkins-rce-poc

2026-08-27 KitPloitKITPLOIT

CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins

2026-08-26 KitPloitKITPLOIT

CVE-2019-1003000_RCE-DETECTION

2026-08-24 KitPloitKITPLOIT

Exploit for CVE-2019-1003000

2021-03-31 jokerscaerGITEE

Exploit for CVE-2019-1003000

2021-02-07 xudongGITEE

Exploit for CVE-2019-1003000

2020-07-18 ctfer-staoGITEE

Exploit for CVE-2019-1003000

2020-01-19 frontcoldGITEE

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-PURPLE-WL-JENKINS_CVE-2019-1003000
Jenkins_Script-Security_Pipeline प्लगइन रिमोट कोड निष्पादन भेद्यता_CVE-2019-1003000 pocsuite संस्करण