Artemis Java Test Sandbox versions less than 1.7.6 are vulnerable to a sandbox escape when an attacker crafts a special subclass of InvocationTargetException. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sandboxed code.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| de.tum.in.ase:artemis-java-test-sandbox(Maven) | 0 | 1.7.6 | N/A |
CVSS Metrics
