Artemis Java Test Sandbox versions less than 1.7.6 are vulnerable to a sandbox escape when an attacker crafts a special subclass of InvocationTargetException.
CVSS 3.1HIGH 8.2·Local·Low privileges·User interaction·EPSS 0.00358·Published 2024-01-19·Fixed in 1.7.6CWE-653
Artemis Java Test Sandbox versions before 1.11.2 are vulnerable to a sandbox escape when an attacker loads untrusted libraries using System.load or System.loadLibrary.
CVSS 3.1HIGH 8.2·Local·Low privileges·User interaction·EPSS 0.00344·Published 2024-01-19·Fixed in 1.11.2CWE-284
Artemis Java Test Sandbox versions before 1.8.0 are vulnerable to a sandbox escape when an attacker includes class files in a package that Ares trusts.
CVSS 3.1HIGH 8.2·Local·Low privileges·User interaction·EPSS 0.0035·Published 2024-01-19·Fixed in 1.8.0CWE-501