description: A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShell.java that allows attackers able to control pipeline scripts to execute arbitrary code on the Jenkins master JVM.
affected:
{
product: Jenkins Pipeline: Groovy Plugin
vendor: Jenkins project
versions:
status: affected, version: 2.63 and earlier
}