ghsa-23h5-8ph6-7rfc
Vulnerability from github
Published
2022-02-16 00:01
Modified
2023-10-27 16:24
Severity ?
Summary
Path traversal vulnerability in Jenkins Fortify Plugin
Details
Jenkins Fortify Plugin 20.2.34 and earlier does not sanitize the appName
and appVersion
parameters of its Pipeline steps, which are used to write to files inside build directories.
This allows attackers with Item/Configure permission to write or overwrite .xml
files on the Jenkins controller file system with content not controllable by the attacker.
Jenkins Fortify Plugin 20.2.35 sanitizes the appName
and appVersion
parameters of its Pipeline steps when determining the resulting filename.
{ "affected": [ { "package": { "ecosystem": "Maven", "name": "org.jenkins-ci.plugins:fortify" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "20.2.35" } ], "type": "ECOSYSTEM" } ] } ], "aliases": [ "CVE-2022-25188" ], "database_specific": { "cwe_ids": [ "CWE-22" ], "github_reviewed": true, "github_reviewed_at": "2022-12-01T23:05:05Z", "nvd_published_at": "2022-02-15T17:15:00Z", "severity": "MODERATE" }, "details": "Jenkins Fortify Plugin 20.2.34 and earlier does not sanitize the `appName` and `appVersion` parameters of its Pipeline steps, which are used to write to files inside build directories.\n\nThis allows attackers with Item/Configure permission to write or overwrite `.xml` files on the Jenkins controller file system with content not controllable by the attacker.\n\nJenkins Fortify Plugin 20.2.35 sanitizes the `appName` and `appVersion` parameters of its Pipeline steps when determining the resulting filename.", "id": "GHSA-23h5-8ph6-7rfc", "modified": "2023-10-27T16:24:32Z", "published": "2022-02-16T00:01:27Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-25188" }, { "type": "WEB", "url": "https://github.com/jenkinsci/fortify-plugin/commit/ba3030cb63bb86b6bb13342664e0e319f2fee374" }, { "type": "PACKAGE", "url": "https://github.com/jenkinsci/fortify-plugin" }, { "type": "WEB", "url": "https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2214" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2022/02/15/2" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "type": "CVSS_V3" } ], "summary": "Path traversal vulnerability in Jenkins Fortify Plugin" }
Loading...
Loading...
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.