PT-2023-24114 · Jenkins · Jenkins Pipeline Utility Steps Plugin+1

Published 2023-05-16 · Updated 2023-06-09 · CVE-2023-32981

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Jenkins Pipeline Utility Steps Plugin versions 2.15.2 and earlier

Description The issue allows attackers to create or replace arbitrary files on the agent file system with attacker-specified content by providing crafted archives as parameters. This is due to the lack of validation or limitation of file paths of files contained within archives. The untar and unzip Pipeline steps are used to extract archives into job workspaces.

Recommendations For Jenkins Pipeline Utility Steps Plugin versions 2.15.2 and earlier, update to version 2.15.3 or later, which rejects extraction of files in tar and zip archives that would be placed outside the expected destination directory.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2023-32981

GHSA-6987-XCCV-FHJP

RHSA-2023:3610

RHSA-2023:3625

RHSA-2023:3663

Affected Products

Jenkins

Jenkins Pipeline Utility Steps Plugin

References · 5

• https://jenkins.io/security/advisory/2023-05-16/#SECURITY-2196 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6987-xccv-fhjp · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-32981 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32981 · Security Note
• https://github.com/jenkinsci/pipeline-utility-steps-plugin/commit/0ba4f329ee27c023609653e25bdd5604c5e46a11 · Note