{
  "node_id": "mitre-capec-capec-237-escaping-a-sandbox-by-calling-code-in-another",
  "title": "MITRE CAPEC-237: Escaping a Sandbox by Calling Code in Another Language (Detailed Attack Pattern - Very High Severity)",
  "domain": "Cybersecurity",
  "version": "1.0.0",
  "last_updated": "2026-05-25",
  "bluf": "MITRE CAPEC-237 (Escaping a Sandbox by Calling Code in Another Language) is a detailed-level attack pattern in the MITRE Common Attack Pattern Enumeration and Classification. The attacker may submit malicious code of another language to obtain access to privileges that were not intentionally exposed by the sandbox, thus escaping the sandbox. For instance, Java code cannot perform unsafe operations, such as modifying arbitrary memory locations, due to restrictions placed on it by the Byte code Verifier and the JVM. Likelihood of attack: Low. Typical severity: Very High. Maps to weaknesses CWE-693.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "nist_framework",
      "iso_standard",
      "industry_mapping",
      "mitre_attack"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "nist-sp-800-53-r5",
    "iso-27001-2022",
    "cis-controls-v8",
    "owasp-asvs-l2"
  ],
  "primary_citations_count": 7
}