GitHub Advisoryadvisory · Maven

GHSA-298j-9q4w-6rm4 Agent-to-controller security bypass in Jenkins xUnit Plugin

MEDIUM Published 2022-06-24 Modified 2022-12-05 Official page ↗
Aliases
CVE-2022-34181
Ecosystem
Maven
Packages
org.jenkins-ci.plugins:xunit
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-693
Reviewed
2022-07-05

Affected packages

• Maven org.jenkins-ci.plugins:xunit: < 3.1.0 → fixed in 3.1.0

Description

xUnit Plugin 3.0.8 and earlier implements an agent-to-controller message that creates a user-specified directory if it doesn’t exist, and parsing files inside it as test results. This allows attackers able to control agent processes to create an arbitrary directory on the Jenkins controller or to obtain test results from existing files in an attacker-specified directory. xUnit Plugin 3.1.0 changes the message type from agent-to-controller to controller-to-agent, preventing execution on the controller.

Related

Alias · CVE (1)

  • CVE-2022-34181 Jenkins xUnit Plugin 3.0.8 and earlier implements an agent-to-controller message that creates a user-specified directory if it doesn't… vulnerability

Weakness · CWE (1)

  • CWE-693 Protection Mechanism Failure weakness

References