Jenkins Sonar Gerrit Plugin vulnerable to Cross-Site Request Forgery

2022-12-1209:30:35

Google

osv.dev

jenkins

sonar

gerrit

plugin

csrf

cross-site request forgery

vulnerable

security

credentials

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

30.5%

JSON

A cross-site request forgery (CSRF) vulnerability in Jenkins Sonar Gerrit Plugin 377.v8f3808963dc5 and earlier allows attackers to have Jenkins connect to Gerrit servers (previously configured by Jenkins administrators) using attacker-specified credentials IDs obtained through another method, potentially capturing credentials stored in Jenkins.

CPENameOperatorVersion
org.jenkins-ci.plugins:sonar-gerriteq2.4.5
org.jenkins-ci.plugins:sonar-gerriteq353.v20e9cff705d1
org.jenkins-ci.plugins:sonar-gerriteq1.0.8
org.jenkins-ci.plugins:sonar-gerriteq368.vb_a_b_e20a_b_6a_b_d
org.jenkins-ci.plugins:sonar-gerriteq1.0.4
org.jenkins-ci.plugins:sonar-gerriteq2.4.4
org.jenkins-ci.plugins:sonar-gerriteq376.v67dc39df1298
org.jenkins-ci.plugins:sonar-gerriteq1.0.6
org.jenkins-ci.plugins:sonar-gerriteq377.v8f3808963dc5
org.jenkins-ci.plugins:sonar-gerriteq363.v95109f2b_9d0d

Name	Operator	Version
org.jenkins-ci.plugins:sonar-gerrit	eq	2.4.5
org.jenkins-ci.plugins:sonar-gerrit	eq	353.v20e9cff705d1
org.jenkins-ci.plugins:sonar-gerrit	eq	1.0.8
org.jenkins-ci.plugins:sonar-gerrit	eq	368.vb_a_b_e20a_b_6a_b_d
org.jenkins-ci.plugins:sonar-gerrit	eq	1.0.4
org.jenkins-ci.plugins:sonar-gerrit	eq	2.4.4
org.jenkins-ci.plugins:sonar-gerrit	eq	376.v67dc39df1298
org.jenkins-ci.plugins:sonar-gerrit	eq	1.0.6
org.jenkins-ci.plugins:sonar-gerrit	eq	377.v8f3808963dc5
org.jenkins-ci.plugins:sonar-gerrit	eq	363.v95109f2b_9d0d