Lucene search

GitHub Advisory DatabaseGHSA-M82G-FV7V-H64M

HistoryDec 12, 2022 - 9:30 a.m.

Jenkins Sonar Gerrit Plugin vulnerable to Cross-Site Request Forgery

2022-12-1209:30:35

CWE-352

GitHub Advisory Database

github.com

jenkins

sonar

gerrit

csrf

vulnerability

cross-site request forgery

plugin

credential capture

security issue

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

30.4%

JSON

A cross-site request forgery (CSRF) vulnerability in Jenkins Sonar Gerrit Plugin 377.v8f3808963dc5 and earlier allows attackers to have Jenkins connect to Gerrit servers (previously configured by Jenkins administrators) using attacker-specified credentials IDs obtained through another method, potentially capturing credentials stored in Jenkins.

Affected configurations

Vulners

Node

org.jenkinsci.plugins\Matchsonar

CPENameOperatorVersion
org.jenkins-ci.plugins:sonar-gerritle377.v8f3808963dc5

CPE	Name	Operator	Version
	org.jenkins-ci.plugins:sonar-gerrit	le	377.v8f3808963dc5

References

github.com/advisories/GHSA-m82g-fv7v-h64m

github.com/jenkinsci/sonar-gerrit-plugin/commit/f4646d4df0870bd06b76de86309bb38fbd929d54

nvd.nist.gov/vuln/detail/CVE-2022-46688

www.jenkins.io/security/advisory/2022-12-07/#SECURITY-1002

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

30.4%

JSON

Related for GHSA-M82G-FV7V-H64M