PT-2023-24126 · Jenkins · Jenkins Saml Single Sign On(Sso) Plugin+1

Kevin Guerroudj · Publicado 2023-05-16 · Atualizado 2023-05-26 · CVE-2023-32995

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Jenkins SAML Single Sign On(SSO) Plugin versions 2.0.0 and earlier

Description A cross-site request forgery (CSRF) vulnerability allows attackers to send an HTTP POST request with a JSON body containing attacker-specified content to miniOrange's API for sending emails. The vulnerability is due to the lack of a permission check in an HTTP endpoint, which can be exploited by attackers with Overall/Read permission. Additionally, the HTTP endpoint does not require POST requests, contributing to the CSRF vulnerability.

Recommendations For Jenkins SAML Single Sign On(SSO) Plugin versions 2.0.0 and earlier, update to version 2.0.1 or later, which removes the affected HTTP endpoint. As a temporary workaround, consider restricting access to the vulnerable HTTP endpoint to minimize the risk of exploitation.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2023-32995

GHSA-GHPM-MGF5-CV8Q

Produtos afetados

Jenkins

Jenkins Saml Single Sign On(Sso) Plugin

Referências · 5

• https://jenkins.io/security/advisory/2023-05-16/#SECURITY-2994 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-32995 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-32995 · Aviso do Fabricante
• https://t.me/cvenotify/50576 · Publicação no Telegram
• https://osv.dev/vulnerability/GHSA-ghpm-mgf5-cv8q · Aviso do Fabricante