CVE-2019-1003001

This exploit leverages a vulnerability in Jenkins Groovy scripts where a malicious JAR file is fetched via Grape and executed through the Runner service mechanism, achieving remote code execution. The PoC demonstrates how to craft a JAR with a malicious class and trigger its execution via a specially crafted script compilation request.

This Metasploit module exploits CVE-2019-1003002 in Jenkins by bypassing ACLs via dynamic routing and leveraging Groovy metaprogramming to execute arbitrary code. It downloads and executes a malicious JAR file, achieving remote code execution.