PT-2023-22753 · Jenkins · Jenkins Report Portal Plugin+1

Yaroslav Afenkin · Published 2023-04-12 · Updated 2023-04-20 · CVE-2023-30525

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Jenkins Report Portal Plugin versions 0.5 and earlier

Description A cross-site request forgery (CSRF) vulnerability allows attackers to connect to an attacker-specified URL using attacker-specified bearer token authentication. This issue arises because the plugin does not perform a permission check in a method implementing form validation, enabling attackers with Overall/Read permission to exploit this vulnerability. The form validation method also does not require POST requests, contributing to the CSRF vulnerability.

Recommendations For Jenkins Report Portal Plugin versions 0.5 and earlier, consider disabling the form validation method until a patch is available to prevent exploitation. Restrict access to the plugin's functionality to minimize the risk of attackers connecting to attacker-specified URLs using bearer token authentication. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2023-30525

GHSA-C8FF-J5GM-6492

Affected Products

Jenkins

Jenkins Report Portal Plugin

References · 7

• https://jenkins.io/security/advisory/2023-04-12/#SECURITY-2950 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-c8ff-j5gm-6492 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-30525 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-30525 · Security Note
• http://openwall.com/lists/oss-security/2023/04/13/3 · Note
• https://t.me/cibsecurity/61986 · Telegram Post
• https://t.me/cvenotify/48186 · Telegram Post