https://bugzilla.redhat.com/show_bug.cgi?id=1689873
--- Doc Text *updated* by Eric Christensen sparks@redhat.com --- A flaw was found in the Jenkins Script Security plugin version 1.53. An attacker with Overall/Read permissions is able to escape the sandbox and execute arbitrary code on the Jenkins master JVM. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.