Lucene search

GitHub Advisory DatabaseGHSA-RWG2-W82X-V57J

HistoryMar 30, 2022 - 12:00 a.m.

XML External Entity Reference vulnerability in Jenkins Pipeline: Phoenix AutoTest Plugin

2022-03-3000:00:26

CWE-611

GitHub Advisory Database

github.com

jenkins

pipeline

phoenix autotest plugin

xml

external entity

vulnerability

xxe

attack

input files

readxml

writexml

build step

crafted file

secrets

controller

server-side request forgery

software

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS

0.001

Percentile

28.4%

JSON

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
This allows attackers able to control the input files for the readXml or writeXml build step to have Jenkins parse a crafted file that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.

Affected configurations

Vulners

Node

com.surenpi.jenkinsphoenix-autotestRange≤1.3

VendorProductVersionCPE
com.surenpi.jenkinsphoenix-autotest*cpe:2.3:a:com.surenpi.jenkins:phoenix-autotest:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
com.surenpi.jenkins	phoenix-autotest	*	cpe:2.3:a:com.surenpi.jenkins:phoenix-autotest::::::::

References

www.openwall.com/lists/oss-security/2022/03/29/1

github.com/advisories/GHSA-rwg2-w82x-v57j

nvd.nist.gov/vuln/detail/CVE-2022-28155

www.jenkins.io/security/advisory/2022-03-29/#SECURITY-1897

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS

0.001

Percentile

28.4%

JSON

Related for GHSA-RWG2-W82X-V57J