CVE-2022-43402: Jenkins Pipeline: Groovy Plugin allows sandbox protection bypass and arbitrary code execution

The vulnerability centers on missing sandbox checks for Groovy's implicit type casts. The workflow-cps plugin's CPS transformer and Groovy sandbox interceptor are the primary components handling script execution security. The CpsTransformer's sanitization logic and GroovyInterceptor's cast handling would directly process these operations. The patched version explicitly adds cast interception, indicating these were the vulnerable points. While exact patch details aren't provided, the advisory's technical description of intercepting implicit casts aligns with modifications to these core sandbox enforcement mechanisms.