Artemis Java Test Sandbox vulnerabilities

A vulnerability in Artemis Java Test Sandbox versions prior to 1.7.6 allows a sandbox escape when an attacker crafts a special subclass of InvocationTargetException. An attacker can exploit this issue to execute arbitrary Java code when a victim runs the supposedly sandboxed code.

A vulnerability in Artemis Java Test Sandbox before version 1.8.0 allows a sandbox escape by including trusted class files. An attacker can exploit this to execute arbitrary Java code when a victim runs the supposedly sandboxed code.

A vulnerability in Artemis Java Test Sandbox before version 1.11.2 allows a sandbox escape when an attacker loads untrusted libraries using System.load or System.loadLibrary. An attacker can exploit this to execute arbitrary Java code when a victim runs the supposedly sandboxed code.