Environment

linux

What parser are you using?

Default (Espree)

What did you do?

i found bug access Script Console Jenkins lead to do rce jenkins2.eslint.org


<!-- Paste your configuration here -->

<!-- Paste your code here -->

What did you expect to happen?

can attacker access Script Console Jenkins lead to do rce

What actually happened?

1- go to http://146.48.122.11:8080/_script and see access Script
Console Jenkins lead to do rce jenkins2.eslint.org

Link to Minimal Reproducible Example

https://stackblitz.com/ab222

Participation

• I am willing to submit a pull request for this issue.

Additional comments