GitHub Advisoryadvisory · Maven

GHSA-g975-f26h-93g8 Jenkins Pipeline: Stage View Plugin allows CSRF protection bypass of any target URL in Jenkins

HIGH Published 2022-10-19 Modified 2023-10-27 Official page ↗
Aliases
CVE-2022-43408
Ecosystem
Maven
Packages
org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-352, CWE-838
Reviewed
2022-10-19

Affected packages

• Maven org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view: >= 2.25, < 2.27 → fixed in 2.27 • Maven org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view: < 2.24.2 → fixed in 2.24.2

Description

Jenkins Pipeline: Stage View Plugin provides a visualization of Pipeline builds. It also allows users to interact with `input` steps from Pipeline: Input Step Plugin. Pipeline: Stage View Plugin 2.26 and earlier does not correctly encode the ID of `input` steps when using it to generate URLs to proceed or abort Pipeline builds. This allows attackers able to configure Pipelines to specify `input` step IDs resulting in URLs that would bypass the CSRF protection of any target URL in Jenkins. Pipeline: Stage View Plugin 2.27 correctly encodes the ID of `input` steps when using it to generate URLs to proceed or abort Pipeline builds.

Related

Alias · CVE (1)

  • CVE-2022-43408 Jenkins Pipeline: Stage View Plugin 2.26 and earlier does not correctly encode the ID of 'input' steps when using it to generate URLs to… vulnerability

Weakness · CWE (2)

  • CWE-352 Cross-Site Request Forgery weakness
  • CWE-838 Inappropriate Encoding for Output Context weakness

References