CVE-2024-23683 affects Artemis Java Test Sandbox versions less than 1.7.6. The vulnerability arises from improper sandbox enforcement when handling a specially crafted subclass of InvocationTargetException. An attacker with low privileges and requiring user interaction can exploit this to escape the sandbox and execute arbitrary Java code, compromising the sandbox's security guarantees. The CVSS 3.1 vector indicates local attack vector with low complexity, requiring privileges and user interaction, but resulting in complete confidentiality, integrity, and availability impact.

Successful exploitation allows an attacker to bypass the sandbox restrictions and execute arbitrary Java code with the privileges of the sandboxed process. This can lead to full compromise of the affected system's confidentiality, integrity, and availability.

A fixed version 1.7.6 or later is implied but not explicitly stated; however, the affected versions are all versions less than 1.7.6. Users should upgrade to version 1.7.6 or later once available. Patch status is not yet confirmed from vendor advisory; therefore, check the vendor advisory for current remediation guidance.