PT-2023-27399 · Jenkins · Jenkins Blue Ocean Plugin+1

Alvaro Muñoz + 1 · Publicado 2023-08-16 · Atualizado 2023-08-18 · CVE-2023-40341

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Jenkins Blue Ocean Plugin versions 1.27.5 and earlier

Description A cross-site request forgery (CSRF) vulnerability allows attackers to connect to an attacker-specified URL, capturing GitHub credentials associated with an attacker-specified job. This issue is due to an incomplete fix and results from not requiring POST requests for an HTTP endpoint. The vulnerability enables attackers to exploit the HTTP endpoint and capture sensitive information.

Recommendations For Jenkins Blue Ocean Plugin versions 1.27.5 and earlier, update to a version that includes the complete fix for the issue, such as version 1.27.5.1, which uses the configured SCM URL instead of a user-specified URL. As a temporary workaround, consider restricting access to the vulnerable HTTP endpoint until a patch is applied.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2023-40341

GHSA-G4PQ-P927-7PGG

RHSA-2024:0777

RHSA-2024:0778

Produtos afetados

Jenkins

Jenkins Blue Ocean Plugin

Referências · 10

• https://jenkins.io/security/advisory/2023-08-16/#SECURITY-3116 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1691855733027995655 · Publicação no Twitter
• https://osv.dev/vulnerability/GHSA-g4pq-p927-7pgg · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-40341 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-40341 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1691822019304661116 · Publicação no Twitter
• https://t.me/cvenotify/56886 · Publicação no Telegram
• https://t.me/cvenotify/56802 · Publicação no Telegram
• https://t.me/cvenotify/56608 · Publicação no Telegram
• http://openwall.com/lists/oss-security/2023/08/16/3 · Nota