description: A sandbox bypass vulnerability in Jenkins ontrack Plugin 3.4 and earlier allowed attackers with control over ontrack DSL definitions to execute arbitrary code on the Jenkins master JVM.
affected:
{
product: Jenkins ontrack Plugin
vendor: Jenkins project
versions:
status: affected, version: 3.4 and earlier
}