CVE-2024-23682

CVE-2024-23682: Artemis Java Test Sandbox Class Loading Escape

Weakness CWE-501
Published January 19, 2024
Last update November 28, 2025

CVSS base score

What the vulnerability does

Description

Artemis Java Test Sandbox versions before 1.8.0 are vulnerable to a sandbox escape when an attacker includes class files in a package that Ares trusts. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sandboxed code.

Key dates

Disclosure timeline

January 19, 2024 CVE published
November 28, 2025 Record updated