Lucene search

GoogleOSV:GHSA-WGPP-G6V9-7HXP

HistoryDec 12, 2022 - 9:30 a.m.

Jenkins Plot Plugin XML External Entity Reference vulnerability

2022-12-1209:30:35

Google

osv.dev

jenkins

plot plugin

xml

external entity reference

vulnerability

attack

jenkins controller

server-side request forgery

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

58.4%

JSON

Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

This allows attackers able to control XML input files for the ‘Plot build data’ build step to have Jenkins parse a crafted file that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.

Plot Plugin 2.1.12 disables external entity resolution for its XML parser.

References

github.com/jenkinsci/plot-plugin

github.com/jenkinsci/plot-plugin/commit/4f7afbe064aab538a242a9984e583e513863e0ac

nvd.nist.gov/vuln/detail/CVE-2022-46682

www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2940

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

58.4%

JSON

Related for OSV:GHSA-WGPP-G6V9-7HXP