CVE-2024-23681

Artemis Java Test Sandbox Libary Load Escape

Artemis Java Test Sandbox versions before 1.11.2 are vulnerable to a sandbox escape when an attacker loads untrusted libraries using System.load or System.loadLibrary. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sandboxed code.

Affected

de.tum.in.ase:artemis-java-test-sandbox

CVSS v3.1 NVD

8.2 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

EPSS

0.34% chance of exploitation in the next 30 days, 26th percentile

Published

2024-01-19

Updated

2026-07-14

Proof-of-concept exploits (2)

• advisories/GHSA-98hq-4wmw-98w9
• ls1intum/Ares/security/advisories/GHSA-98hq-4wmw-98w9

Security advisories

• https://vulncheck.com/advisories/vc-advisory-GHSA-98hq-4wmw-98w9

References

• CVE Record
• NVD entry