GitHub Advisoryadvisory · Maven

GHSA-cjgm-9vc9-56mx Path traversal vulnerability in Jenkins Matrix Project Plugin

MEDIUM Published 2024-01-24 Modified 2024-01-31 Official page ↗
Aliases
CVE-2024-23900
Ecosystem
Maven
Packages
org.jenkins-ci.plugins:matrix-project
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
Weaknesses
CWE-22
Reviewed
2024-01-24

Affected packages

• Maven org.jenkins-ci.plugins:matrix-project: < 822.824.v14451b → fixed in 822.824.v14451b

Description

Jenkins Matrix Project Plugin 822.v01b_8c85d16d2 and earlier does not sanitize user-defined axis names of multi-configuration projects submitted through the `config.xml` REST API endpoint. This allows attackers with Item/Configure permission to create or replace any `config.xml` file on the Jenkins controller file system with content not controllable by the attackers. Matrix Project Plugin 822.824.v14451b_c0fd42 sanitizes user-defined axis names of Multi-configuration project.

Related

Alias · CVE (1)

  • CVE-2024-23900 Jenkins Matrix Project Plugin 822.v01b_8c85d16d2 and earlier does not sanitize user-defined axis names of multi-configuration projects,… vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References