PT-2022-26892 · Jenkins · Jenkins Pipeline: Stage View Plugin+1

Daniel Beck + 2 · Published 2022-10-19 · Updated 2023-11-01 · CVE-2022-43408

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Jenkins Pipeline: Stage View Plugin versions 2.26 and earlier

Description The issue arises from the incorrect encoding of the ID of input steps when generating URLs to proceed or abort Pipeline builds, allowing attackers who can configure Pipelines to specify input step IDs. This results in URLs that can bypass the CSRF protection of any target URL in Jenkins.

Recommendations For Jenkins Pipeline: Stage View Plugin versions 2.26 and earlier, update to version 2.27 or later to correctly encode the ID of input steps and prevent bypassing CSRF protection. As a temporary workaround, consider restricting access to the input step functionality until the update is applied.

Fix

CSRF

Weakness Enumeration

CWE-838

CWE-352

Related Identifiers

CVE-2022-43408

GHSA-G975-F26H-93G8

RHSA-2023:0560

RHSA-2023:0777

RHSA-2023:1064

RHSA-2023:3198

Affected Products

Jenkins

Jenkins Pipeline: Stage View Plugin

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2022-43408 · Security Note
• https://jenkins.io/security/advisory/2022-10-19/#SECURITY-2828 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-43408 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-g975-f26h-93g8 · Vendor Advisory
• https://github.com/jenkinsci/pipeline-stage-view-plugin/commit/cee275109ee748fa9f599ec60159807a28a2933f · Note
• https://t.me/cvenotify/60337 · Telegram Post
• http://openwall.com/lists/oss-security/2022/10/19/3 · Note
• https://t.me/cibsecurity/51804 · Telegram Post