VULNERABILITY INTELLIGENCE

CVE-2023-26919

CVSS score7.2 HIGH

EPSS probability0.61%

CISA KEVNot currently listed

Published2023-04-10

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L

Description

delight-nashorn-sandbox 0.2.4 and 0.2.5 is vulnerable to sandbox escape. When allowExitFunctions is set to false, the loadWithNewGlobal function can be used to invoke the exit and quit methods to exit the Java process.

Weakness classification

nvd@nist.gov: CWE-74
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-74

Primary references

cve@mitre.org — Exploit, Issue Tracking, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Vendor Advisory