Lucene search

GitHub Advisory DatabaseGHSA-H656-VMRG-7RR6

HistoryJul 12, 2023 - 6:30 p.m.

Jenkins Test Results Aggregator Plugin missing permission check

2023-07-1218:30:38

CWE-862

GitHub Advisory Database

github.com

jenkins

test results aggregator

permission check

http endpoint

form validation

overall/read permission

csrf

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

0.0005 Low

EPSS

Percentile

18.1%

JSON

Jenkins Test Results Aggregator Plugin 1.2.13 and earlier does not perform a permission check in an HTTP endpoint implementing form validation.

This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified username and password.

Additionally, this HTTP endpoint does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.

Affected configurations

Vulners

Node

jenkinstest_results_aggregatorRange≤1.2.13jenkins

CPENameOperatorVersion
org.jenkins-ci.plugins:test-results-aggregatorle1.2.13

CPE	Name	Operator	Version
	org.jenkins-ci.plugins:test-results-aggregator	le	1.2.13

References

www.openwall.com/lists/oss-security/2023/07/12/2

github.com/advisories/GHSA-h656-vmrg-7rr6

nvd.nist.gov/vuln/detail/CVE-2023-37956

www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3122

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

0.0005 Low

EPSS

Percentile

18.1%

JSON

Related for GHSA-H656-VMRG-7RR6