GitHub Advisoryadvisory · Maven

GHSA-6987-xccv-fhjp Jenkins Pipeline Utility Steps Plugin arbitrary file write vulnerability

MEDIUM Published 2023-05-16 Modified 2023-05-17 Official page ↗
Aliases
CVE-2023-32981
Ecosystem
Maven
Packages
org.jenkins-ci.plugins:pipeline-utility-steps
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-787
Reviewed
2023-05-17

Affected packages

• Maven org.jenkins-ci.plugins:pipeline-utility-steps: < 2.15.3 → fixed in 2.15.3

Description

Jenkins Pipeline Utility Steps Plugin provides the `untar` and `unzip` Pipeline steps to extract archives into job workspaces. Pipeline Utility Steps Plugin 2.15.2 and earlier does not validate or limit file paths of files contained within these archives. This allows attackers able to provide crafted archives as parameters to create or replace arbitrary files on the agent file system with attacker-specified content. Pipeline Utility Steps Plugin 2.15.3 rejects extraction of files in `tar` and `zip` archives that would be placed outside the expected destination directory.

Related

Alias · CVE (1)

  • CVE-2023-32981 An arbitrary file write vulnerability in Jenkins Pipeline Utility Steps Plugin 2.15.2 and earlier allows attackers able to provide crafted… vulnerability

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References