{"affected":[{"defaultStatus":"unaffected","ecosystem":"maven","packageName":"de.tum.in.ase:artemis-java-test-sandbox","product":"","source":"CNA: VulnCheck","vendor":"","versions":[{"lessThan":"1.7.6","status":"affected","version":"0","versionType":"maven"}]},{"defaultStatus":"unaffected","ecosystem":"Maven","packageName":"de.tum.in.ase:artemis-java-test-sandbox","product":"de.tum.in.ase:artemis-java-test-sandbox","source":"OSV GHSA-883x-6fch-6wjx","vendor":"","versions":[{"status":"affected","version":"1.0.0","versionType":"Maven"},{"status":"affected","version":"1.0.1","versionType":"Maven"},{"status":"affected","version":"1.1.0","versionType":"Maven"},{"status":"affected","version":"1.1.1","versionType":"Maven"},{"status":"affected","version":"1.2.0","versionType":"Maven"},{"status":"affected","version":"1.2.1","versionType":"Maven"},{"status":"affected","version":"1.2.2","versionType":"Maven"},{"status":"affected","version":"1.3.0","versionType":"Maven"},{"status":"affected","version":"1.3.1","versionType":"Maven"},{"status":"affected","version":"1.3.2","versionType":"Maven"},{"status":"affected","version":"1.3.3","versionType":"Maven"},{"status":"affected","version":"1.3.4","versionType":"Maven"},{"status":"affected","version":"1.4.0","versionType":"Maven"},{"status":"affected","version":"1.4.1","versionType":"Maven"},{"status":"affected","version":"1.4.2","versionType":"Maven"},{"status":"affected","version":"1.4.3","versionType":"Maven"},{"status":"affected","version":"1.4.4","versionType":"Maven"},{"status":"affected","version":"1.4.5","versionType":"Maven"},{"status":"affected","version":"1.4.6","versionType":"Maven"},{"status":"affected","version":"1.4.7","versionType":"Maven"},{"status":"affected","version":"1.5.0","versionType":"Maven"},{"status":"affected","version":"1.5.1","versionType":"Maven"},{"status":"affected","version":"1.5.2","versionType":"Maven"},{"status":"affected","version":"1.5.3","versionType":"Maven"},{"status":"affected","version":"1.5.4","versionType":"Maven"},{"status":"affected","version":"1.5.5","versionType":"Maven"},{"status":"affected","version":"1.6.0","versionType":"Maven"},{"status":"affected","version":"1.7.0","versionType":"Maven"},{"status":"affected","version":"1.7.1","versionType":"Maven"},{"status":"affected","version":"1.7.2","versionType":"Maven"},{"status":"affected","version":"1.7.3","versionType":"Maven"},{"status":"affected","version":"1.7.5","versionType":"Maven"},{"events":[{"introduced":"0"},{"fixed":"1.7.6"}],"status":"unknown","version":"0","versionType":"ECOSYSTEM"}]}],"cveId":"CVE-2024-23683","cwes":["CWE-653"],"description":"Artemis Java Test Sandbox versions less than 1.7.6 are vulnerable to a sandbox escape when an attacker crafts a special subclass of InvocationTargetException. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sandboxed code.","epss":{"date":"2026-11-08","percentile":0.29763,"score":0.00358},"exploits":[],"kev":null,"metrics":[{"score":8.2,"severity":"high","source":"ADP: CISA-ADP","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794146399706,"publishedAt":1705697322271,"references":[{"source":"CNA: VulnCheck","tags":["vendor-advisory"],"url":"https://github.com/ls1intum/Ares/security/advisories/GHSA-883x-6fch-6wjx"},{"source":"CNA: VulnCheck","tags":["issue-tracking"],"url":"https://github.com/ls1intum/Ares/issues/15#issuecomment-996449371"},{"source":"CNA: VulnCheck","tags":["patch"],"url":"https://github.com/ls1intum/Ares/commit/af4f28a56e2fe600d8750b3b415352a0a3217392"},{"source":"CNA: VulnCheck","tags":["related","release-notes"],"url":"https://github.com/ls1intum/Ares/releases/tag/1.7.6"},{"source":"CNA: VulnCheck","tags":["vendor-advisory"],"url":"https://github.com/advisories/GHSA-883x-6fch-6wjx"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://vulncheck.com/advisories/vc-advisory-GHSA-883x-6fch-6wjx"},{"source":"ADP: CVE","tags":["vendor-advisory","x_transferred"],"url":"https://github.com/ls1intum/Ares/security/advisories/GHSA-883x-6fch-6wjx"},{"source":"ADP: CVE","tags":["related","x_transferred"],"url":"https://github.com/ls1intum/Ares/issues/15#issuecomment-996449371"},{"source":"ADP: CVE","tags":["patch","x_transferred"],"url":"https://github.com/ls1intum/Ares/commit/af4f28a56e2fe600d8750b3b415352a0a3217392"},{"source":"ADP: CVE","tags":["related","x_transferred"],"url":"https://github.com/ls1intum/Ares/releases/tag/1.7.6"},{"source":"ADP: CVE","tags":["third-party-advisory","x_transferred"],"url":"https://github.com/advisories/GHSA-883x-6fch-6wjx"},{"source":"ADP: CVE","tags":["third-party-advisory","x_transferred"],"url":"https://vulncheck.com/advisories/vc-advisory-GHSA-883x-6fch-6wjx"},{"source":"OSV / GitHub Security Advisories","tags":["advisory"],"url":"https://github.com/advisories/GHSA-883x-6fch-6wjx"},{"source":"OSV / GitHub Security Advisories","tags":["osv"],"url":"https://osv.dev/vulnerability/GHSA-883x-6fch-6wjx"}],"remediation":[{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/ls1intum/Ares/commit/af4f28a56e2fe600d8750b3b415352a0a3217392"},{"kind":"fix","source":"ADP: CVE","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/ls1intum/Ares/commit/af4f28a56e2fe600d8750b3b415352a0a3217392"},{"kind":"fix","source":"OSV GHSA-883x-6fch-6wjx","text":"de.tum.in.ase:artemis-java-test-sandbox (Maven): OSV reports a fixed version 1.7.6. Check the advisory for supported release branches.","url":"https://github.com/advisories/GHSA-883x-6fch-6wjx"}],"revision":"9230b3da2f0e41760b7ea13984de589fffa52dd962da56aeb9a60c12400ce7e2","sources":[{"modifiedAt":1794146399706,"name":"CNA: VulnCheck","retrievedAt":1794146933643,"url":"https://www.cve.org/CVERecord?id=CVE-2024-23683"},{"modifiedAt":1783493591805,"name":"OSV / GitHub Security Advisories","retrievedAt":1794146934076,"url":"https://osv.dev/vulnerability/GHSA-883x-6fch-6wjx"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794150558483,"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-23683"}],"ssvc":{"assessedAt":1705950057798,"automatable":"no","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Artemis Java Test Sandbox InvocationTargetException Subclass Escape","updatedAt":1794150558483}