GHSA-4jhm-5f7g-75fp

Improper Limitation of a Pathname to a Restricted Directory in Jenkins

Source: GitHub Advisory Database (reviewed) High CVE-2018-1000863

Packages

Ecosystem	Package	Affected	Fixed in
Maven	org.jenkins-ci.main:jenkins-core	< 2.138.4	2.138.4
Maven	org.jenkins-ci.main:jenkins-core	>= 2.140, < 2.154	2.154

Details

As written in the advisory (Markdown source, shown as plain text).

A data modification vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in User.java, IdStrategy.java that allows attackers to submit crafted user names that can cause an improper migration of user record storage formats, potentially preventing the victim from logging into Jenkins.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2018-1000863 advisory
https://github.com/jenkinsci/jenkins/commit/4ed66e5838476e575a83c3cd13fffb37eefa2f48 web
https://github.com/jenkinsci/jenkins/commit/7bae6dd6ef23af988801d38dc0f8f693bc6283f8 web
https://access.redhat.com/errata/RHBA-2019:0024 web
https://github.com/jenkinsci/jenkins package
https://jenkins.io/security/advisory/2018-12-05/#SECURITY-1072 web
https://www.tenable.com/security/research/tra-2018-43 web
http://www.securityfocus.com/bid/106176 web