CSRF vulnerability in Jenkins RocketChat Notifier Plugin

2022-03-3000:00:25

Google

osv.dev

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.2%

JSON

Jenkins RocketChat Notifier Plugin 1.4.10 and earlier does not perform a permission check in a method implementing form validation.

This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credential.

Additionally, this form validation method does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.

RocketChat Notifier Plugin 1.5.0 requires POST requests and Overall/Administer permission for the affected form validation method.

CPENameOperatorVersion
org.jenkins-ci.plugins:rocketchatnotifiereq0.3.1-alpha
org.jenkins-ci.plugins:rocketchatnotifiereq1.1.2
org.jenkins-ci.plugins:rocketchatnotifiereq1.0.1
org.jenkins-ci.plugins:rocketchatnotifiereq1.4.3
org.jenkins-ci.plugins:rocketchatnotifiereq1.3.0
org.jenkins-ci.plugins:rocketchatnotifiereq0.3.0
org.jenkins-ci.plugins:rocketchatnotifiereq0.3.0-alpha
org.jenkins-ci.plugins:rocketchatnotifiereq1.4.10
org.jenkins-ci.plugins:rocketchatnotifiereq1.3.2
org.jenkins-ci.plugins:rocketchatnotifiereq1.2.1

Name	Operator	Version
org.jenkins-ci.plugins:rocketchatnotifier	eq	0.3.1-alpha
org.jenkins-ci.plugins:rocketchatnotifier	eq	1.1.2
org.jenkins-ci.plugins:rocketchatnotifier	eq	1.0.1
org.jenkins-ci.plugins:rocketchatnotifier	eq	1.4.3
org.jenkins-ci.plugins:rocketchatnotifier	eq	1.3.0
org.jenkins-ci.plugins:rocketchatnotifier	eq	0.3.0
org.jenkins-ci.plugins:rocketchatnotifier	eq	0.3.0-alpha
org.jenkins-ci.plugins:rocketchatnotifier	eq	1.4.10
org.jenkins-ci.plugins:rocketchatnotifier	eq	1.3.2
org.jenkins-ci.plugins:rocketchatnotifier	eq	1.2.1