CVE-2024-23681

Description

Artemis Java Test Sandbox versions before 1.11.2 are vulnerable to a sandbox escape when an attacker loads untrusted libraries using System.load or System.loadLibrary. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sandboxed code.

Weakness classification

• disclosure@vulncheck.com: CWE-284
• nvd@nist.gov: NVD-CWE-Other

Primary references

• disclosure@vulncheck.com — Exploit, Third Party Advisory
• disclosure@vulncheck.com — Exploit, Vendor Advisory
• disclosure@vulncheck.com — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory