{"affected":[{"defaultStatus":"unaffected","ecosystem":"maven","packageName":"de.tum.in.ase:artemis-java-test-sandbox","product":"","source":"CNA: VulnCheck","vendor":"","versions":[{"lessThan":"1.11.2","status":"affected","version":"0","versionType":"maven"}]},{"defaultStatus":"unaffected","ecosystem":"Maven","packageName":"de.tum.in.ase:artemis-java-test-sandbox","product":"de.tum.in.ase:artemis-java-test-sandbox","source":"OSV GHSA-98hq-4wmw-98w9","vendor":"","versions":[{"status":"affected","version":"1.0.0","versionType":"Maven"},{"status":"affected","version":"1.0.1","versionType":"Maven"},{"status":"affected","version":"1.1.0","versionType":"Maven"},{"status":"affected","version":"1.1.1","versionType":"Maven"},{"status":"affected","version":"1.10.0","versionType":"Maven"},{"status":"affected","version":"1.10.1","versionType":"Maven"},{"status":"affected","version":"1.11.0","versionType":"Maven"},{"status":"affected","version":"1.11.1","versionType":"Maven"},{"status":"affected","version":"1.2.0","versionType":"Maven"},{"status":"affected","version":"1.2.1","versionType":"Maven"},{"status":"affected","version":"1.2.2","versionType":"Maven"},{"status":"affected","version":"1.3.0","versionType":"Maven"},{"status":"affected","version":"1.3.1","versionType":"Maven"},{"status":"affected","version":"1.3.2","versionType":"Maven"},{"status":"affected","version":"1.3.3","versionType":"Maven"},{"status":"affected","version":"1.3.4","versionType":"Maven"},{"status":"affected","version":"1.4.0","versionType":"Maven"},{"status":"affected","version":"1.4.1","versionType":"Maven"},{"status":"affected","version":"1.4.2","versionType":"Maven"},{"status":"affected","version":"1.4.3","versionType":"Maven"},{"status":"affected","version":"1.4.4","versionType":"Maven"},{"status":"affected","version":"1.4.5","versionType":"Maven"},{"status":"affected","version":"1.4.6","versionType":"Maven"},{"status":"affected","version":"1.4.7","versionType":"Maven"},{"status":"affected","version":"1.5.0","versionType":"Maven"},{"status":"affected","version":"1.5.1","versionType":"Maven"},{"status":"affected","version":"1.5.2","versionType":"Maven"},{"status":"affected","version":"1.5.3","versionType":"Maven"},{"status":"affected","version":"1.5.4","versionType":"Maven"},{"status":"affected","version":"1.5.5","versionType":"Maven"},{"status":"affected","version":"1.6.0","versionType":"Maven"},{"status":"affected","version":"1.7.0","versionType":"Maven"},{"status":"affected","version":"1.7.1","versionType":"Maven"},{"status":"affected","version":"1.7.2","versionType":"Maven"},{"status":"affected","version":"1.7.3","versionType":"Maven"},{"status":"affected","version":"1.7.5","versionType":"Maven"},{"status":"affected","version":"1.7.6","versionType":"Maven"},{"status":"affected","version":"1.8.0","versionType":"Maven"},{"status":"affected","version":"1.9.0","versionType":"Maven"},{"status":"affected","version":"1.9.1","versionType":"Maven"},{"status":"affected","version":"1.9.2","versionType":"Maven"},{"events":[{"introduced":"0"},{"fixed":"1.11.2"}],"status":"unknown","version":"0","versionType":"ECOSYSTEM"}]}],"cveId":"CVE-2024-23681","cwes":["CWE-284"],"description":"Artemis Java Test Sandbox versions before 1.11.2 are vulnerable to a sandbox escape when an attacker loads untrusted libraries using System.load or System.loadLibrary. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sandboxed code.","epss":{"date":"2026-11-08","percentile":0.28147,"score":0.00344},"exploits":[],"kev":null,"metrics":[{"score":8.2,"severity":"high","source":"ADP: CISA-ADP","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794146398329,"publishedAt":1705697493540,"references":[{"source":"CNA: VulnCheck","tags":["vendor-advisory"],"url":"https://github.com/ls1intum/Ares/security/advisories/GHSA-98hq-4wmw-98w9"},{"source":"CNA: VulnCheck","tags":["vendor-advisory"],"url":"https://github.com/advisories/GHSA-98hq-4wmw-98w9"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://vulncheck.com/advisories/vc-advisory-GHSA-98hq-4wmw-98w9"},{"source":"ADP: CVE","tags":["vendor-advisory","x_transferred"],"url":"https://github.com/ls1intum/Ares/security/advisories/GHSA-98hq-4wmw-98w9"},{"source":"ADP: CVE","tags":["third-party-advisory","x_transferred"],"url":"https://github.com/advisories/GHSA-98hq-4wmw-98w9"},{"source":"ADP: CVE","tags":["third-party-advisory","x_transferred"],"url":"https://vulncheck.com/advisories/vc-advisory-GHSA-98hq-4wmw-98w9"},{"source":"OSV / GitHub Security Advisories","tags":["advisory"],"url":"https://github.com/advisories/GHSA-98hq-4wmw-98w9"},{"source":"OSV / GitHub Security Advisories","tags":["osv"],"url":"https://osv.dev/vulnerability/GHSA-98hq-4wmw-98w9"}],"remediation":[{"kind":"fix","source":"OSV GHSA-98hq-4wmw-98w9","text":"de.tum.in.ase:artemis-java-test-sandbox (Maven): OSV reports a fixed version 1.11.2. Check the advisory for supported release branches.","url":"https://github.com/advisories/GHSA-98hq-4wmw-98w9"}],"revision":"f7efb10f60a2773e97da3e93b9d77e6278ee6fc85156d23b4c243e3985d4b9e5","sources":[{"modifiedAt":1794146398329,"name":"CNA: VulnCheck","retrievedAt":1794146931368,"url":"https://www.cve.org/CVERecord?id=CVE-2024-23681"},{"modifiedAt":1783492045485,"name":"OSV / GitHub Security Advisories","retrievedAt":1794146931813,"url":"https://osv.dev/vulnerability/GHSA-98hq-4wmw-98w9"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794150558713,"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-23681"}],"ssvc":{"assessedAt":1731517332862,"automatable":"no","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Artemis Java Test Sandbox Libary Load Escape","updatedAt":1794150558713}