~ / search / GHSA-jrqh-c9v8-ccx9

GHSA-jrqh-c9v8-ccx9

Path traversal in Jenkins build-publisher Plugin

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-41231

Packages

EcosystemPackageAffectedFixed in
Maven org.jenkins-ci.plugins:build-publisher <= 1.22 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers with Item/Configure permission to create or replace any `config.xml` file on the Jenkins controller file system by providing a crafted file name to an API endpoint. Additionally, this endpoint does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability that allows attackers to replace any `config.xml` file on the Jenkins controller file system with an empty file. There is currently no known workaround or fix, and this plugin has been suspended.

References

External links from the advisory. They lead to third-party sites.