{
  "artifact_sha256": {
    "repro/proof/fixed_1.config.after.xml": "ac1476a75a3a1e2fde5fbd010c2bfa2c475cf1250a7f67c0cec76c57966da9d9",
    "repro/proof/fixed_1.config.request.txt": "acb53e9acbf53f3f6ba32be64193225a560378fdfd5f447eb8eaef57989ce4f4",
    "repro/proof/fixed_1.config.response.body": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "repro/proof/fixed_1.config.response.headers": "b14c6b0e18fcf96f73b6228fa8535e00cccf5f94660e0fd2a8c9453621543f95",
    "repro/proof/fixed_1.container_id.txt": "fee83ea44ebae9e25661fdd1540c044e5451ee89d0f665faf61b231f1f55734c",
    "repro/proof/fixed_1.direct_console.body": "9e6704b209b84e13945fa5e85687220698ac7a2a6035af96adc499b1088ac330",
    "repro/proof/fixed_1.direct_console.headers": "3808c1e6816c4e3d9522a81b00010fced8e0d2633ac14b3def6e4908507cf256",
    "repro/proof/fixed_1.health.json": "418448ae1f64974ab07dcfe6cbffc01771bfb945448fea73df456dd06cc270dd",
    "repro/proof/fixed_1.marker_absent.txt": "554ea0b261078928dc20993130efdac3e8d3511b672d5de25a7706ee2a5fd66e",
    "repro/proof/fixed_1.negative_control.json": "5dc18fb53777616893ea4614220fe1226a207886a62334c60277781421ff524c",
    "repro/proof/fixed_1.route.request.txt": "6cfcab083e5c006fce72cc57523be946039c8f9fb0d27a7264b4a4d74f27ef0e",
    "repro/proof/fixed_1.route.response.body": "e19e68484f74619be140b1b7066bf891e9cfd953e63fecd8337ea7361145f1f1",
    "repro/proof/fixed_1.route.response.headers": "bae2d2b2fd14b88167f6e7e396d0ae6fd72ccb14d9767901900b2f083ec45206",
    "repro/proof/fixed_1.service.log": "674d5508c441ee130dde07cb5bf897565a6562a329a9c91c5f5457367f86e1bc",
    "repro/proof/fixed_2.config.after.xml": "ac1476a75a3a1e2fde5fbd010c2bfa2c475cf1250a7f67c0cec76c57966da9d9",
    "repro/proof/fixed_2.config.request.txt": "acb53e9acbf53f3f6ba32be64193225a560378fdfd5f447eb8eaef57989ce4f4",
    "repro/proof/fixed_2.config.response.body": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "repro/proof/fixed_2.config.response.headers": "30a11dd295672ecee8badf84fb4df3b1526cc8d98ca9179d066701344fecb3bb",
    "repro/proof/fixed_2.container_id.txt": "ec828c81064e2412fbc782293e2568ec25ed7e1db44e4c64299b631a4837d127",
    "repro/proof/fixed_2.direct_console.body": "cbb368c75f8f41a5ad3b43916b69c4833e2750bff99f3d191b31259580cbae96",
    "repro/proof/fixed_2.direct_console.headers": "96d0cec819a0187a332a55d869ed8a2f18b210f71bba74506e9c3769f6db2347",
    "repro/proof/fixed_2.health.json": "418448ae1f64974ab07dcfe6cbffc01771bfb945448fea73df456dd06cc270dd",
    "repro/proof/fixed_2.marker_absent.txt": "cf76a96a446ef9a6260bdea672bc7028ea1af8fada09000289563cb7d08b5cbd",
    "repro/proof/fixed_2.negative_control.json": "e75a59efa66936e0e54ccf702e03e6edae9b92ea6d388ac1a4329d8179fcb20a",
    "repro/proof/fixed_2.route.request.txt": "42a86193b697b821d8ae047fb3480134646710f5386f501b2057783b544b5dd0",
    "repro/proof/fixed_2.route.response.body": "8cf8f4c20375913efddda7ffa89678122b6fd57540b5d63f656e9bac703b66c0",
    "repro/proof/fixed_2.route.response.headers": "4b4d2f1be86afa9e966a78d35de0a695d5f7536e91ac1498e97e88b69bdbfcec",
    "repro/proof/fixed_2.service.log": "5b9371f7b62e85027971c0b83abc495e8254cb4796ae11f3509d64e21d31d833",
    "repro/proof/target_identity.txt": "3847a3b1371c11acdabc75e87d36c32e134a24b8b6fb572e064ae3a6330112a5",
    "repro/proof/vulnerable_1.capability_observation.json": "024eee9ca0a5c8ea9efe610645f1644693f0bb32b88a3aba9331f1a6e8ae3da0",
    "repro/proof/vulnerable_1.config.after.xml": "ac1476a75a3a1e2fde5fbd010c2bfa2c475cf1250a7f67c0cec76c57966da9d9",
    "repro/proof/vulnerable_1.config.request.txt": "acb53e9acbf53f3f6ba32be64193225a560378fdfd5f447eb8eaef57989ce4f4",
    "repro/proof/vulnerable_1.config.response.body": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "repro/proof/vulnerable_1.config.response.headers": "e9967f7d6d015915be900f5ca7b0c2665e05ce354baf2915d0b968142105dd1a",
    "repro/proof/vulnerable_1.container_id.txt": "b33d128393c86d8ab3c34a43cfeb8670b20f231382865a0afe14bde90ae30e61",
    "repro/proof/vulnerable_1.direct_console.body": "21461688ec00b6aec3de00a84ebdef772735570913d1317856555385ba2e16f9",
    "repro/proof/vulnerable_1.direct_console.headers": "a7fb176c79c144a4f7b23c93dcea876d639961c816eddf8aeeb8735b07db329d",
    "repro/proof/vulnerable_1.health.json": "418448ae1f64974ab07dcfe6cbffc01771bfb945448fea73df456dd06cc270dd",
    "repro/proof/vulnerable_1.marker.txt": "ffa9645efd99146f7235eb78c806d6e3c3060f20e47496c2a1f6042ef0a22611",
    "repro/proof/vulnerable_1.route.request.txt": "54d1fc1612d6371eca39a77fd10c2a33e9527d539c3dce493c206fb16f9498d5",
    "repro/proof/vulnerable_1.route.response.body": "eeb2a1479cd44a75ae8161ef8d185aa5556724200f80cd42dd4152a89508f68c",
    "repro/proof/vulnerable_1.route.response.headers": "e1571548efbd85d6f46b44f888ba540b2b35d5d0d442d0f5ffcb7b64e9180030",
    "repro/proof/vulnerable_1.service.log": "6a6a39825878d36ee668c7463b91474d9d1db577fefe2a63a59967f8791c544d",
    "repro/proof/vulnerable_2.capability_observation.json": "d2c22a0ef6e20822000e36c2750e908390512a4476ec4b05b1cefed33e1f57ce",
    "repro/proof/vulnerable_2.config.after.xml": "ac1476a75a3a1e2fde5fbd010c2bfa2c475cf1250a7f67c0cec76c57966da9d9",
    "repro/proof/vulnerable_2.config.request.txt": "acb53e9acbf53f3f6ba32be64193225a560378fdfd5f447eb8eaef57989ce4f4",
    "repro/proof/vulnerable_2.config.response.body": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "repro/proof/vulnerable_2.config.response.headers": "a570ab525bd3884589d7fb153eaeedb511a21f99fecde23b5f391e6f554eb512",
    "repro/proof/vulnerable_2.container_id.txt": "ada82f1186a8f92b4dc2447eb710a31d2407f8a2517df6233a569f4a7a810de4",
    "repro/proof/vulnerable_2.direct_console.body": "2aeb42501f0e4dc27f8b6776c941994f9e4837aafa194e0a84e68d6ff270a481",
    "repro/proof/vulnerable_2.direct_console.headers": "17fdce1404c321ef219b8c4be5ea8c3b97294b9bde561cea79ca5c8628ae92d9",
    "repro/proof/vulnerable_2.health.json": "418448ae1f64974ab07dcfe6cbffc01771bfb945448fea73df456dd06cc270dd",
    "repro/proof/vulnerable_2.marker.txt": "0128a3fcc1a520772bc719dab8ca93c4df27da9b2e76b2371330ccae0cb8c32d",
    "repro/proof/vulnerable_2.route.request.txt": "32220f57abf152b888e40595a748cc1284518cf0ca18c21beda0edb37ddcd745",
    "repro/proof/vulnerable_2.route.response.body": "98396721ea80af17ae58f872cb83692db19142027b32d9ccef3bdbee6caacba2",
    "repro/proof/vulnerable_2.route.response.headers": "90d0ebd0d76a062cb6fb5a3a41183e64041e96b5e412a445ea3907aa1442e0ae",
    "repro/proof/vulnerable_2.service.log": "4fe1077b3f4304af73e4426a0a02afb0f702ab84d6dfa389a0b5db5a3a220881"
  },
  "entrypoint_detail": "Authenticated POST /job/carrier/config.xml, then POST forged /job/carrier/pollingLog/run/project/parent/scriptText",
  "entrypoint_kind": "endpoint",
  "healthcheck_passed": true,
  "notes": "Two vulnerable Jenkins 2.579 processes executed attacker Groovy and created unique controller-local markers; two Jenkins 2.580 controls removed the forbidden nested graph, returned a non-success route status, and created no marker.",
  "proof_artifacts": [
    "repro/proof/fixed_1.config.after.xml",
    "repro/proof/fixed_1.config.request.txt",
    "repro/proof/fixed_1.config.response.body",
    "repro/proof/fixed_1.config.response.headers",
    "repro/proof/fixed_1.container_id.txt",
    "repro/proof/fixed_1.direct_console.body",
    "repro/proof/fixed_1.direct_console.headers",
    "repro/proof/fixed_1.health.json",
    "repro/proof/fixed_1.marker_absent.txt",
    "repro/proof/fixed_1.negative_control.json",
    "repro/proof/fixed_1.route.request.txt",
    "repro/proof/fixed_1.route.response.body",
    "repro/proof/fixed_1.route.response.headers",
    "repro/proof/fixed_1.service.log",
    "repro/proof/fixed_2.config.after.xml",
    "repro/proof/fixed_2.config.request.txt",
    "repro/proof/fixed_2.config.response.body",
    "repro/proof/fixed_2.config.response.headers",
    "repro/proof/fixed_2.container_id.txt",
    "repro/proof/fixed_2.direct_console.body",
    "repro/proof/fixed_2.direct_console.headers",
    "repro/proof/fixed_2.health.json",
    "repro/proof/fixed_2.marker_absent.txt",
    "repro/proof/fixed_2.negative_control.json",
    "repro/proof/fixed_2.route.request.txt",
    "repro/proof/fixed_2.route.response.body",
    "repro/proof/fixed_2.route.response.headers",
    "repro/proof/fixed_2.service.log",
    "repro/proof/target_identity.txt",
    "repro/proof/vulnerable_1.capability_observation.json",
    "repro/proof/vulnerable_1.config.after.xml",
    "repro/proof/vulnerable_1.config.request.txt",
    "repro/proof/vulnerable_1.config.response.body",
    "repro/proof/vulnerable_1.config.response.headers",
    "repro/proof/vulnerable_1.container_id.txt",
    "repro/proof/vulnerable_1.direct_console.body",
    "repro/proof/vulnerable_1.direct_console.headers",
    "repro/proof/vulnerable_1.health.json",
    "repro/proof/vulnerable_1.marker.txt",
    "repro/proof/vulnerable_1.route.request.txt",
    "repro/proof/vulnerable_1.route.response.body",
    "repro/proof/vulnerable_1.route.response.headers",
    "repro/proof/vulnerable_1.service.log",
    "repro/proof/vulnerable_2.capability_observation.json",
    "repro/proof/vulnerable_2.config.after.xml",
    "repro/proof/vulnerable_2.config.request.txt",
    "repro/proof/vulnerable_2.config.response.body",
    "repro/proof/vulnerable_2.config.response.headers",
    "repro/proof/vulnerable_2.container_id.txt",
    "repro/proof/vulnerable_2.direct_console.body",
    "repro/proof/vulnerable_2.direct_console.headers",
    "repro/proof/vulnerable_2.health.json",
    "repro/proof/vulnerable_2.marker.txt",
    "repro/proof/vulnerable_2.route.request.txt",
    "repro/proof/vulnerable_2.route.response.body",
    "repro/proof/vulnerable_2.route.response.headers",
    "repro/proof/vulnerable_2.service.log"
  ],
  "runtime_stack": [
    "docker",
    "jenkins-controller-2.579",
    "stapler",
    "xstream"
  ],
  "service_started": true,
  "target_identity": {
    "architecture": "x86_64",
    "commit_sha": "9095ea3a5c5e7dcd392695a5dd880af1c9910ddf",
    "platform": "linux",
    "repository_url": "https://github.com/jenkinsci/jenkins",
    "runtime_digest": "a7342867ea33efaacf825229d50b7fc77c144ecada9719ab4e32419f5d7412be",
    "target_digest": "a7342867ea33efaacf825229d50b7fc77c144ecada9719ab4e32419f5d7412be"
  },
  "target_path_reached": true
}